CVE-2026-48552 in Nagios Coreinformação

Sumário

de MITRE • 12/08/2026

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflected from stored fields are inserted into the DOM without sanitization, allowing attackers to run arbitrary JavaScript in the victim's browser.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

VulnCheck

Reservar

21/05/2026

Divulgação

12/08/2026

Moderação

aceite

Entrada

VDB-389099

CPE

pronto

EPSS

0.00000

KEV

não

Atividades

muito baixo

Sector

Insurance, Telecommunication, ...

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-48552
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-48552
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-48552/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!