Patchfirst: Nagios vulnerabilitieshttps://patchfirst.co/vendor/nagios/New and newly exploited Nagios CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMTCVE-2026-2041: Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-2041/CVE-2026-2041Fri, 20 Feb 2026 00:00:00 GMTNagios · Host. Not in CISA KEV. EPSS 75.6% (higher than 99.52% of CVEs). CVSS 7.2 HIGH. Priority 25.6 of 100.CVE-2026-2043: Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-2043/CVE-2026-2043Fri, 20 Feb 2026 00:00:00 GMTNagios · Host. Not in CISA KEV. EPSS 75.4% (higher than 99.52% of CVEs). CVSS 7.2 HIGH. Priority 25.6 of 100.[KEV] CVE-2021-25298: Nagios XI OS Command Injectionhttps://patchfirst.co/cve/CVE-2021-25298/CVE-2021-25298#kevTue, 18 Jan 2022 00:00:00 GMTNagios · Nagios XI. In CISA KEV since 2022-01-18. ENISA EUVD lists it as exploited. EPSS 73.6% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 69.1 of 100.kevpublic-exploitT1190[KEV] CVE-2021-25297: Nagios XI OS Command Injectionhttps://patchfirst.co/cve/CVE-2021-25297/CVE-2021-25297#kevTue, 18 Jan 2022 00:00:00 GMTNagios · Nagios XI. In CISA KEV since 2022-01-18. ENISA EUVD lists it as exploited. EPSS 56.7% (higher than 99.06% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2021-25296: Nagios XI OS Command Injectionhttps://patchfirst.co/cve/CVE-2021-25296/CVE-2021-25296#kevTue, 18 Jan 2022 00:00:00 GMTNagios · Nagios XI. In CISA KEV since 2022-01-18. ENISA EUVD lists it as exploited. EPSS 71.9% (higher than 99.43% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2019-15949: Nagios XI Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2019-15949/CVE-2019-15949#kevWed, 03 Nov 2021 00:00:00 GMTNagios · Nagios XI. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 77.0% (higher than 99.55% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.kevpublic-exploitT1078T1059CVE-2018-15708: Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP…https://patchfirst.co/cve/CVE-2018-15708/CVE-2018-15708Wed, 14 Nov 2018 00:00:00 GMTNagios · Nagios XI. Not in CISA KEV. EPSS 89.4% (higher than 99.78% of CVEs). Public exploit code exists. Priority 25.0 of 100.public-exploit