CVE-2025-67254: Nagios XI

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php.

Affected products

• Nagios Nagios XI: version 2026 only

Published 2025-12-29. Last modified 2026-06-17.