CVE-2021-40345

2021-10-2600:00:00

mitre

www.cve.org

nagios xi

zip files

command injection

admin panel

system commands

AI Score

7.6

Confidence

High

EPSS

0.042

Percentile

92.3%

JSON

An issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an administrator can upload ZIP files. A command injection (within the name of the first file in the archive) allows an attacker to execute system commands.