| Release | Version |
|---|---|
| bookworm | 4.4.6-4+deb12u1 |
| bookworm (security) | 4.4.6-4+deb12u2 |
| trixie | 4.4.6-4.1+deb13u1 |
| trixie (security) | 4.4.6-4.1+deb13u2 |
| sid | 4.5.14+ds-1 |
| Bug | bookworm | trixie | sid | Description |
|---|---|---|---|---|
| CVE-2026-48554 | vulnerable | fixed | fixed | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable ... |
| CVE-2026-48553 | vulnerable | fixed | fixed | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable ... |
| CVE-2026-48552 | vulnerable | fixed | fixed | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable ... |
| CVE-2026-48551 | vulnerable | fixed | fixed | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cros ... |
| CVE-2026-48550 | vulnerable | fixed | fixed | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable ... |
| CVE-2026-48549 | vulnerable | fixed | fixed | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSR ... |
| Bug | bookworm | trixie | sid | Description |
|---|---|---|---|---|
| CVE-2020-35269 | vulnerable | vulnerable | vulnerable | Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross ... |
| Bug | Description |
|---|---|
| CVE-2026-48548 | Nagios Core before 4.5.12 contains a cross-site request forgery vulner ... |
| CVE-2020-13977 | Nagios 4.4.5 allows an attacker, who already has administrative access ... |
| CVE-2018-18245 | Nagios Core 4.4.2 has XSS via the alert summary reports of plugin resu ... |
| CVE-2018-13458 | qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer de ... |
| CVE-2018-13457 | qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer de ... |
| CVE-2018-13441 | qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL po ... |
| DSA / DLA | Description |
|---|---|
| DSA-6556-1 | nagios4 - security update |
| DSA-6308-1 | nagios4 - security update |