High severityNVD Advisory· Published Aug 5, 2025· Updated Jun 16, 2026
CVE-2012-10029
CVE-2012-10029
Description
Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in visApi.php. An authenticated user can inject system commands via unsanitized parameters such as host, resulting in remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <1.3
Patches
Vulnerability mechanics
References
5- packetstorm.news/files/id/118705/nvd
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/nagios_graph_explorer.rbnvd
- www.exploit-db.com/exploits/23227nvd
- www.nagios.com/products/nagios-xi/nvd
- www.vulncheck.com/advisories/nagios-xi-network-monitor-graph-explorer-component-auth-command-injectionnvd
News mentions
0No linked articles in our index yet.