CVE-2026-48549 - Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute Nagios commands as a currently authenticated user. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-81733 [未知] CVE-2026-81733 - WWBN AVideo through 30.0 (and master up to commit 4cb…
• CVE-2026-78610 [未知] CVE-2026-78610 - WatchGuard Dimension's Web UI exposes an administrato…
• CVE-2026-75814 [高危] CVE-2026-75814 - The Ebyte device does not adequately verify the origi…
• CVE-2026-80210 [中危] CVE-2026-80210 - FrontAccounting through 2.4.20 generates a CSRF token…
• CVE-2026-81273 [高危] CVE-2026-81273 - Unauthenticated Cross Site Request Forgery (CSRF) in …
• CVE-2026-81271 [高危] CVE-2026-81271 - Unauthenticated Cross Site Request Forgery (CSRF) in …
• CVE-2026-76549 [中危] CVE-2026-76549 - The UpdraftPlus: WP Backup & Migration Plugin WordPre…
• CVE-2026-48549 [中危] CVE-2026-48549 - Nagios Core before 4.5.13 and Nagios XI before 2026R1…