← All credits
M. Cory Billington of theyhack.me
9 vulnerability records and advisories credit this contributor.
CVE-2026-119742
Nagios XI < 2026R2 OS Command Injection via mibs.php
CVE-2025-34134
Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)
CVE-2026-40520
FreePBX api module Command Injection via GraphQL
CVE-2025-34227
Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection
CVE-2024-13986
Nagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCE
CVE-2025-34323
Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules
CVE-2025-34322
Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries
CVE-2025-34288
Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo
CVE-2025-34287
Nagios XI < 2024R2 Privilege Escalation via process_perfdata.pl