PT-2025-53775 · Nagios Xi · Nagios Xi

Yongye · Published 2025-12-16 · Updated 2025-12-30 · CVE-2025-67255

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NagiosXI version 2026R1.0.1 build 1762361101

Description Dashboard parameters in the software do not have sufficient filtering, which allows authenticated users to exploit a SQL Injection issue. The vulnerability allows unauthorized access to the database through crafted requests to the dashboard.

Recommendations Apply proper filtering to dashboard parameters to prevent SQL Injection attacks.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2026-00418

CVE-2025-67255

Affected Products

Nagios Xi

References · 10

• https://osv.dev/vulnerability/CVE-2025-67255 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67255 · Security Note
• https://bdu.fstec.ru/vul/2026-00418 · Security Note
• https://github.com/YongYe-Security/NagiosXI/tree/main · Note
• https://t.me/CVEtracker/40865 · Telegram Post
• https://nagios.org · Note
• https://twitter.com/CVEnew/status/2005713719695724695 · Twitter Post
• https://t.me/cveNotify/147073 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2005836598298980600 · Twitter Post
• https://github.com/advisories/GHSA-2wcx-prwg-mc24 · Note