CVE-2025-44823
Critical · CVSS 9.9- CVSS
- 9.9
- nvd
- EPSS
- 16.1%
- 97th pct
- KEV
- No
- Class
- other
- CWE-497
Description
Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.
References
Status: profiled · ingested 2026-10-08T18:00:43.000Z