High severity7.0NVD Advisory· Published Oct 30, 2025· Updated Jun 16, 2026
CVE-2011-10035
CVE-2011-10035
Description
Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-check/time-of-use race conditions and missing synchronization or final-path validation, a local low-privileged user could manipulate filesystem state during crontab installation to influence the files or commands executed with elevated privileges, resulting in execution with higher privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- Nagios/XIv5Range: 0
<2011R1.9+ 10 more
- (no CPE)range: <2011R1.9
- cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*range: <=2009
- cpe:2.3:a:nagios:nagios_xi:2011:r1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.2:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.3:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.4:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.5:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.6:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.7:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.8:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.vulncheck.com/advisories/nagios-xi-race-conditions-in-crontab-install-script-lpenvdThird Party Advisory
- www.nagios.com/changelog/nagios-xi/nvdRelease Notes
News mentions
0No linked articles in our index yet.