← Database

CVE-2021-40345

HIGH CVSS: 7.2 Published: 2021-10-26 Modified: 2026-06-17

Description

An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. A command injection (within the name of the first file in the archive) allows an attacker to execute system commands.

Affected Platforms

Nagios Nagios Xi

Weakness Type

CWE-77

References