CVE-2024-54961

6.5 mediumEPSS 1.6%

Medium (6.5) in nagios nagios xi. EPSS 1.6% chance of exploitation in the next 30 days.

Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple pages displaying the usernames and email addresses of all current users.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2025-02-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nagios:nagios_xi

References

https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54961

Check your stack JSON