Home / mailingsPDF  

[SECURITY] [DSA 6556-1] nagios4 security update

Posted on 12 October 2026
Debian Security Advisory

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6556-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 12, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : nagios4
CVE ID : CVE-2026-48549 CVE-2026-48550 CVE-2026-48551
CVE-2026-48552 CVE-2026-48553 CVE-2026-48554

Multiple security vulnerabilities were discovered in the Nagios
monitoring system, which could result in cross-site request forgery,
cross-site scripting or the execution of arbitrary commands.

For the stable distribution (trixie), these problems have been fixed in
version 4.4.6-4.1+deb13u2.

We recommend that you upgrade your nagios4 packages.

For the detailed security status of nagios4 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/nagios4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

 

TOP