CVE-2025-56432

A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-related data.

• CWE-79

• https://www.nagios.com/changelog/Release Notes

Published

Aug 26, 2025

Last Modified

Jul 5, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-56426An issue WebKul Bagisto v.2.3.6 allows a remote attacker to …6.5
• CVE-2025-56427Directory Traversal vulnerability in ComposioHQ v.0.7.20 all…7.5
• CVE-2025-56429Cross Site Scripting vulnerability in Fearless Geek Media Fe…6.1
• CVE-2025-5643A vulnerability classified as problematic was found in Radar…2.5
• CVE-2025-56430Directory Traversal vulnerability in Fearless Geek Media Fea…7.5
• CVE-2025-56431Directory Traversal vulnerability in Fearless Geek Media Fea…7.5
• CVE-2025-56435SQL Injection vulnerability in FoxCMS v1.2.6 and before allo…5.3
• CVE-2025-56438An issue in the firmware update mechanism of Nous W3 Smart W…6.8
• CVE-2025-5644A vulnerability, which was classified as problematic, has be…2.5
• CVE-2025-56447TM2 Monitoring v3.04 contains an authentication bypass and p…9.8
• CVE-2025-56448The Positron PX360BT SW REV 8 car alarm system is vulnerable…6.8
• CVE-2025-56449A security vulnerability was identified in Obsidian Schedule…8.2