CVE-2025-60424

High · 7.6

CVSS

7.6

EPSS

0.7%

Published

Oct 27, 2025

CISA due date

—

The record

A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack.

Affected packages

Ecosystem	Package	Introduced	Fixed