New Vulnerabilities in Nagios Software Endanger IT Infrastructure

11 new vulnerabilities found in the Nagios management software could affect IT infrastructure for companies around the globe. Nagios is a popular open-source network health analysis tool used to check for performance issues and alert on the failure of critical infrastructure. The exploits exist in Nagios XI which provides a web interface for Nagios software. Chaining the multiple vulnerabilities allows full remote code execution on the target system with root privileges. This can be exploited to drop a web shell or execute arbitrary PHP code on the system. These exploits have been compared to the likes of SolarWinds and Kaseya as Nagios is similar in its network management capabilities. Nagios urges customers to update to their latest release of Nagios XI to ensure all known vulnerabilities have been removed.