CVE-2020-36868

Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The script performed profile retrieval and initialization routines using insecure file/command handling and insufficient validation of attacker-controlled inputs, and in some deployments executed with elevated privileges. A local attacker with low-level access could exploit these weaknesses to cause the script to execute arbitrary commands or modify privileged files, resulting in privilege escalation.

• CWE-73
• CWE-250

• https://www.nagios.com/changelog/nagios-xi/Release Notes
• https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-insecure-getprofile-scriptThird Party Advisory

Published

Oct 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36862Nagios XI versions prior to 5.6.11 contain unauthenticated v…6.1
• CVE-2020-36863Nagios XI versions prior to 5.7.2 allow PHP files to be uplo…8.8
• CVE-2020-36864Nagios XI versions prior to 5.7.2 are vulnerable to cross-si…5.4
• CVE-2020-36865Nagios XI versions prior to 5.7.2 are vulnerable to cross-si…5.4
• CVE-2020-36866Nagios XI versions prior to 5.7.3 are vulnerable to cross-si…5.4
• CVE-2020-36867Nagios XI versions prior to 5.7.3 contain a command injectio…8.8
• CVE-2020-36869Nagios XI versions prior to 5.7.5 contain a SQL injection vu…7.2
• CVE-2020-3687Local privilege escalation in admin services in Windows envi…5.5
• CVE-2020-36870Various Ruijie Gateway EG and NBR models firmware versions 1…9.2
• CVE-2020-36871ESCAM QD-900 WIFI HD cameras contain an unauthenticated conf…8.7
• CVE-2020-36872BACnet Test Server versions up to and including 1.01 contain…8.7
• CVE-2020-36873Astak CM-818T3 2.4GHz wireless security surveillance cameras…8.7