CVE-2018-15710
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 44%
from disclosure to weapon70 days
Published on NVDNov 14
1st PoC+70d
metasploitNov 14
exploitation probability
44%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
Affected products
Nagios · Nagios XIpublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47039exploitdbwww.exploit-db.com/exploits/46221unverifiedcve_referencepacketstormsecurity.com/files/153433/Nagios-XI-Magpie_debug.php-Root-Remote-Code-Execution.htmlunverifiedcve_referencewww.exploit-db.com/exploits/46221/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.