CVE-2021-37350

CRITICAL 9.8CVE-2021-37350 · Published 13/08/2021 · updated 17/06/2026

In short

CVE-2021-37350 is a CRITICAL (CVSS 9.8) vulnerability affecting nagios xi (nagios).
Chance of exploitation in the next 30 days (EPSS): 79.3%, higher than 99.6% of all vulnerabilities.
Fix: update to 5.8.5 or later.

Package	Affected versions	Patched versions
nagios xi nagios	`< 5.8.5`	`5.8.5`

Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.