Disclosure summary
In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboard. In some implementations this can result in an unexpected dashboard being presented as the user's default view. Depending on the product's dashboard sharing and access policies, this behavior may cause information exposure or unexpected privilege exposure.
Source-reported weakness categories
CWE-200
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2025-34272
Open original source · Updated Oct 07, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| nagios | log_server | * {"versionEndExcluding":"2024"} |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
| nagios | log_server | 2024 |
Original records & references
- NIST NVD record
- CVE Program record
- www.nagios.com — Release Notes
- www.nagios.com — Vendor Advisory
- www.vulncheck.com — Third Party Advisory
PUBLISHED 2025-10-30T18:15:47-04:00
MODIFIED 2026-10-07T17:10:00-04:00
INGESTED 2026-10-08T12:35:14-04:00