CVE-2026-48552
Nagios Core / XI DOM-based XSS via jsonquery.js
CVSS score
5.1
EPSS probability
%0.3
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.7
CVE-2026-48553Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection
Patch verifiedEPSS %1
5.1
CVE-2026-48550Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter
Patch verifiedEPSS %0
6.9
CVE-2026-48549Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie
Patch verifiedEPSS %0
6.1
CVE-2026-48551Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie
Patch verifiedEPSS %0
6.9
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48552"