CVE-2025-60425 – Nagios Fusion Session Hijacking Vulnerability

CVE ID : CVE-2025-60425

Published : Oct. 27, 2025, 4:15 p.m. | 29 minutes ago

Description : Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…