Rapid7

module

Nagios XI Magpie_debug.php Root Remote Code Execution

Disclosed
Nov 14, 2018

Description

This module exploits two vulnerabilities in Nagios XI <:
CVE-2018-15708 which allows for unauthenticated remote code execution
and CVE-2018-15710 which allows for local privilege escalation.
When combined, these two vulnerabilities allow execution of arbitrary
commands as root.
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.