Unrated severityNVD Advisory· Published Oct 30, 2025· Updated Nov 17, 2025
Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection
CVE-2013-10073
Description
Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary commands with the privileges of the application service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Nagios/XIv5Range: 0
Patches
Vulnerability mechanics
References
2- www.nagios.com/changelog/nagios-xi/mitrerelease-notespatch
- www.vulncheck.com/advisories/nagios-xi-auto-discovery-shell-command-injectionmitrethird-party-advisory
News mentions
0No linked articles in our index yet.