CVE-2011-10035
CVE-2011-10035 is a high-severity vulnerability in Nagios Nagios Xi with a CVSS 3.x base score of 7.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-367.
Key facts
- Severity: High (CVSS 3.x base score 7.0)
- CVSS v4: 7.3
- EPSS exploit prediction: 0% (12th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2011-5269
- Weakness: CWE-367
- Affected product: Nagios Nagios Xi
- Published:
- Last modified:
Description
Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-check/time-of-use race conditions and missing synchronization or final-path validation, a local low-privileged user could manipulate filesystem state during crontab installation to influence the files or commands executed with elevated privileges, resulting in execution with higher privileges.
Frequently asked questions
- What is CVE-2011-10035?
- Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-check/time-of-use race conditions and missing synchronization or final-path validation, a local low-privileged user could manipulate filesystem state during crontab installation to influence the files or commands executed with elevated privileges, resulting in execution with higher privileges.
- How severe is CVE-2011-10035?
- CVE-2011-10035 has a CVSS 3.x base score of 7.0, rated high severity. It is exploitable over local access with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2011-10035 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (12th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2011-10035?
- CVE-2011-10035 primarily affects Nagios Nagios Xi. In total, 10 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2011-10035?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- Does CVE-2011-10035 have an EU (EUVD) identifier?
- Yes. CVE-2011-10035 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2011-5269.
- When was CVE-2011-10035 published?
- CVE-2011-10035 was published on 2025-10-30 and last updated on 2026-06-16.
References
- https://www.nagios.com/changelog/nagios-xi/
- https://www.vulncheck.com/advisories/nagios-xi-race-conditions-in-crontab-install-script-lpe
Affected products (10)
- cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.2:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.3:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.4:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.5:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.6:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.7:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2011:r1.8:*:*:*:*:*:*
More vulnerabilities in Nagios Nagios Xi
- CVE-2024-14003 — Critical (CVSS 9.8): Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote…
- CVE-2024-13999 — Critical (CVSS 9.8): Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or…
- CVE-2024-13996 — Critical (CVSS 9.8): Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's…
- CVE-2024-13994 — Critical (CVSS 9.8): Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins'…
- CVE-2012-10063 — Critical (CVSS 9.8): Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core Configuration Manager…
- CVE-2024-33775 — Critical (CVSS 9.8): An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a…
All CVEs affecting Nagios Nagios Xi →
Other CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition) vulnerabilities
- CVE-2026-25641 — Critical (CVSS 10.0): SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a…
- CVE-2025-64180 — Critical (CVSS 10.0): Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical…
- CVE-2025-34027 — Critical (CVSS 10.0): The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy…
- CVE-2026-25052 — Critical (CVSS 9.9): n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file…
- CVE-2025-13032 — Critical (CVSS 9.9): Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate…
- CVE-2026-53838 — Critical (CVSS 9.8): OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes…
Browse all CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition) vulnerabilities →