CVE-2018-25123

High · 7.8

CVSS

7.8

EPSS

0.3%

Published

Oct 30, 2025

CISA due date

—

The record

Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG graphing component. MRTG-related processes/scripts executed with excessive privileges, allowing a local attacker with limited system access to abuse file/command execution paths or writable resources to gain elevated privileges.

Affected packages

Ecosystem	Package	Introduced	Fixed