UpHeron
All vulnerabilities

Servers and applications

CVE-2024-14003

Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server plugins. Insufficient validation of inbound NRDP request parameters allows crafted input to reach command execution paths, enabling attackers to execute arbitrary commands on the underlying host in the context of the web/Nagios service.

Severity
Critical 9.4
Published
30 Oct 2025
Last changed
2 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2024
Sources
NVD

Affected software

SoftwareAffected versions
Nagios XIServers and applications · cpe:a:nagios:nagios_xi
  • Version 2024-r1.1.5
  • Version 2024-r1.1.4
  • Version 2024-r1.1.3
  • Version 2024-r1.1.2
All 10 release lines
  • Every version before 2024
  • Version 2024-r1
  • Version 2024-r1.0.1
  • Version 2024-r1.0.2
  • Version 2024-r1.1
  • Version 2024-r1.1.1
  • Version 2024-r1.1.2
  • Version 2024-r1.1.3
  • Version 2024-r1.1.4
  • Version 2024-r1.1.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-14003
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-14003