https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:09:01 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-48550 <p>Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim&#39;s browser.</p> <p>Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim&#39;s browser.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-48550 https://vulnerability.circl.lu/vuln/ghsa-hc96-98mh-7j3h <p>Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim&#39;s browser.</p> <p>Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim&#39;s browser.</p> https://vulnerability.circl.lu/vuln/ghsa-hc96-98mh-7j3h https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-48550 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: nagios4, Ubuntu:22.04:LTS: nagios4, Ubuntu:24.04:LTS: nagios4, Ubuntu:26.04:LTS: nagios4</p> <p>Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim&#39;s browser.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: nagios4, Ubuntu:22.04:LTS: nagios4, Ubuntu:24.04:LTS: nagios4, Ubuntu:26.04:LTS: nagios4</p> <p>Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim&#39;s browser.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-48550