Threat database

CVE-2025-60424 is a high-severity vulnerability in Nagios Fusion versions v2024R1.2 and v2024R2 where the OTP verification component lacks rate limiting, enabling attackers with low privileges to perform brute-force attacks to bypass authentication. This flaw impacts confidentiality and integrity by allowing unauthorized access without user interaction. The vulnerability requires network access and low privileges but no user interaction, making exploitation relatively feasible in targeted environments. European organizations using affected Nagios Fusion versions for IT infrastructure monitoring could face unauthorized access risks, potentially leading to data breaches or manipulation of monitoring data. No known exploits are currently reported in the wild, but the absence of patches increases urgency for mitigation. Organizations should implement strict network segmentation, monitor authentication attempts, and apply compensating controls until official patches are released. Countries with significant Nagios Fusion deployments, such as Germany, the UK, France, and the Netherlands, are more likely to be impacted due to their large IT infrastructure sectors and reliance on monitoring tools. Given the vulnerability's characteristics and CVSS score of 7.6, it is classified as high severity.

EPSS 0.7%VulnerabilityGermanyFrance+2