VIR Vulnerability Intelligence Relay

CVE-2016-9565

critical
Published 2016-12-15 · Modified 2026-05-06
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
7.5
VIR risk
9.8

Description

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Predictions

Exploit likelihood
97%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://www.nagios.org/projects/nagios-core/history/4x/

Application impact
VendorProductVersionsFixed
nagiosnagios{"endIncluding":"4.2.1"}

References

CWEs

CWE-284

Verify integrity in audit chain (admin only). AS-IS.