VULNERABILITY INTELLIGENCE

CVE-2024-14004

CVSS score8.8 HIGH

EPSS probability1.11%

CISA KEVNot currently listed

Published2025-10-30

Last modified2026-10-02

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handling (nagvis.conf). An authenticated user could manipulate NagVis configuration data or leverage insufficiently validated configuration settings to obtain elevated privileges on the Nagios XI system.

Weakness classification

disclosure@vulncheck.com: CWE-269

Primary references

disclosure@vulncheck.com — Release Notes
disclosure@vulncheck.com — Vendor Advisory
disclosure@vulncheck.com — Third Party Advisory