UpHeron
All vulnerabilities

Servers and applications

CVE-2021-40344

An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. Therefore it is possible to upload a crafted PHP script to achieve remote command execution.

Severity
High 7.2
Published
26 Oct 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Nagios XIServers and applications · cpe:a:nagios:nagios_xi
  • Version 5.8.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-40344
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-40344