CVE-2025-67255

High · 8.8

CVSS

8.8

EPSS

1.1%

Published

Dec 29, 2025

CISA due date

—

The record

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed