UpHeron
All vulnerabilities

Servers and applications

CVE-2023-7317

Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of sensitive information.

Severity
Critical 9.4
Published
30 Oct 2025
Last changed
18 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2024
Sources
NVD

Affected software

SoftwareAffected versions
Nagios XIServers and applications · cpe:a:nagios:nagios_xi
  • Every version before 2024

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-7317
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-7317