CVE-2019-15949
Nagios XI Remote Code Execution Vulnerability
8.8
CVSS 3.1
77.0 %
EPSS (current)
2021-11-03
KEV addition
No
Ransomware
Timeline
Publication, first public exploit and KEV addition on a day axis.
Key facts
Vendor / product: Nagios / Nagios XI
Published: 2019-09-05 · Due (CISA): 2022-05-03
CWE: CWE-78 · EU list: no
Exploit references (metadata only)
| Source | Reference | Title | Date |
|---|---|---|---|
| metasploit | auxiliary/scanner/http/nagios_xi_scanner | auxiliary/scanner/http/nagios_xi_scanner | – |
| metasploit | exploit/linux/http/nagios_xi_plugins_check_plugin_authenticated_rce | exploit/linux/http/nagios_xi_plugins_check_plugin_authenticated_rce | 2019-07-29 |
| exploitdb | 48191 | Nagios XI - Authenticated Remote Command Execution (Metasploit) | 2020-03-10 |
| exploitdb | 52138 | Nagios Xi 5.6.6 - Authenticated Remote Code Execution (RCE) | 2025-04-08 |
References only — no downloads or instructions.