Remote Code Execution in Nagios XI by Nagios
CVE-2024-14003

9.4CRITICAL

Key Information:

Vendor

NagiOS

Status
Xi
Vendor
CVE Published:
30 October 2025

What is CVE-2024-14003?

Nagios XI is susceptible to remote code execution through its NRDP server plugins due to flawed validation of incoming NRDP request parameters. Attackers can exploit this vulnerability to send malicious inputs that infiltrate command execution pathways, allowing them to execute arbitrary commands on the host machine within the web service context.

Affected Version(s)

XI 0

References

https://www.nagios.com/products/security/#nagios-xi
vendor-advisorypatch
https://www.nagios.com/changelog/nagios-xi/
release-notespatch
https://www.vulncheck.com/advisories/nagios-xi-rce-via-nr...
third-party-advisory

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Exodus Intelligence
JSON
.
CVE-2024-14003 : Remote Code Execution in Nagios XI by Nagios