High (8.8) in nagios nagios xi. EPSS 24% chance of exploitation in the next 30 days.
A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios.
Severity
CVSS 3.1
8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-11-01)