Security Advisory

CVE-2024-24401

9.8
CRITICAL

Vulnerability Description

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component.
Published Date February 26, 2024
Official Source NIST NVD Advisory