CVE-2023-7317 CRITICAL

CVE-2023-7317: Nagios XI < 2024R1 Web SSH Terminal Missing Access Control

Vendor Nagios
Product XI
Weakness CWE-862 · Missing authorization
Published October 30, 2025
Last update May 14, 2026
View on NVD All CVEs

CVSS base score

9.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of sensitive information.

Key dates

02Disclosure timeline

October 30, 2025 CVE published
May 14, 2026 Record updated