← Back to browse · API

CVE-2024-24402

Severity

CRITICAL

CVSS

9.8

EPSS

0.03398

Risk score

40.39

CISA KEV

No

PoC

No

Published

2024-02-26

Modified

2025-03-24

First seen

2026-08-07

Aliases

EUVD-2024-21821, GHSA-42C4-HVG2-MP96

Products

n/a:n/a, n/a:n/a n/a

Sources

euvd EUVD-2024-21821

Description

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/nagios/bin/npcd component.

References