CyberRota Analysis
AI-GeneratedNagios Core versions prior to 4.5.14 and Nagios XI versions before 2026R1.7 are vulnerable to a cross-site request forgery (CSRF) protection bypass due to a flaw in the double-submit cookie mechanism. This vulnerability allows unauthenticated attackers to execute commands as authorized users by crafting malicious links, potentially leading to unauthorized access and control over the system. Organizations using these versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply matching cookie and request parameter values to bypass CSRF protection, enabling unauthenticated attackers to run commands as authorized users via malicious links.