CVE-2020-36863: 
Nagios XI vulnerability analysis and mitigation

Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. This vulnerability was discovered and disclosed in October 2025. The affected component is the audio import feature in Nagios XI installations before version 5.7.2. (VulnCheck)

The vulnerability stems from improper file upload restrictions in the Audio Import directory. The upload handler failed to properly validate file types and did not enforce storage outside of the webroot. Additionally, the web server configuration allowed execution of files within the upload directory. The vulnerability has been assigned a CVSS score of 8.7, indicating high severity. (VulnCheck)

An authenticated attacker with access to the audio import feature could upload malicious PHP files and execute them, leading to remote code execution with the privileges of the application service. This could potentially allow attackers to take control of the affected system. (VulnCheck)

The vulnerability has been fixed in Nagios XI version 5.7.2. Users should upgrade to this version or later to protect against this security issue. (Nagios Changelog)