CVE-2025-44823

High · 8.8

CVSS

8.8

EPSS

16.1%

Published

Oct 7, 2025

CISA due date

—

The record

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.

Affected packages

Ecosystem	Package	Introduced	Fixed