CVE-2024-54960: Nagios XI

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component.

Affected products

• Nagios Nagios XI: version 2024 only

Published 2025-02-20. Last modified 2026-06-17.