Sensitive Information Disclosure in Nagios XI by Nagios
CVE-2024-13998

6MEDIUM

Key Information:

Vendor: NagiOS
Status: Xi
Vendor: CVE Published:; 3 November 2025

What is CVE-2024-13998?

Nagios XI versions before 2024R1.1.3 may expose sensitive user account details, including API keys and hashed passwords, to authenticated users lacking appropriate access rights. This vulnerability poses a risk as it could lead to account compromises, unauthorized API privilege use, and attempts to crack hashed passwords offline. A related issue was previously flagged in CVE-2024-13995, which attempted to address an underlying problem but may not have been fully resolved in earlier versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch