CVE-2018-15708

CRITICALNVD 9.89.8—
EchelonGraph scoreHIGH confidence

Score elevated to 9.8 because EPSS predicts 91% probability of exploitation within the next 30 days (top 0.3% of all CVEs). NVD baseline CVSS 9.8 retained for reference. Confidence: see factors.

Triggered by: EPSS exploit prediction ≥85%
Sources: epss, ghsa, nvd
Weaponized
9.8
EchelonGraph verdictPatch this weekExploitation is likely or a public exploit exists.
  • High exploitation likelihood — EPSS 89%
CISA-KEV: Not listedEPSS: 89%CVSS: 9.8Exploit: NoneExposed: 0

No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

CVSS v3
9.8
EG Score
9.8(high)
EPSS
99.8%
KEV
Not listed

Published

November 14, 2018

Last Modified

November 21, 2024

Advisory Details (2)

Auto-updated Jun 6, 2026
🔬 Proof of concept available. No patch confirmed yet.
generic🟡 PoC Available

[R2] Nagios XI Multiple Vulnerabilities - Research Advisory | Tenable®

https://www.tenable.com/security/research/tra-2018-37
generic🟡 PoC Available

Nagios XI 5.5.6 - Remote Code Execution / Privilege Escalation - Linux webapps Exploit

https://www.exploit-db.com/exploits/46221/

Frequently asked(5)

What is CVE-2018-15708?
CVE-2018-15708 is a critical vulnerability published on November 14, 2018. Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.
When was CVE-2018-15708 disclosed?
CVE-2018-15708 was first published in the National Vulnerability Database on November 14, 2018, with the most recent update on November 21, 2024. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.
Is CVE-2018-15708 actively exploited?
CVE-2018-15708 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 99.8% percentile likelihood of exploitation in the next 30 days — higher percentiles indicate greater predicted risk.
What is the CVSS score of CVE-2018-15708?
CVE-2018-15708 has a CVSS v3 base score of 9.8 (NVD).
How do I remediate CVE-2018-15708?
Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2018-15708, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

Dependency Blast Radius

Explore the affected products and dependency analysis for CVE-2018-15708

Explore →

Is Your Infrastructure Affected by CVE-2018-15708?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs