Are network monitoring tools (WhatsUp Gold, PRTG, Zabbix, Nagios) safe right now?
No network monitoring tool flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 3, 2025). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Progress WhatsUp Gold Path Traversal Vulnerability
- Paessler PRTG Network Monitor OS Command Injection Vulnerability
- Paessler PRTG Network Monitor Local File Inclusion Vulnerability
- Progress WhatsUp Gold SQL Injection Vulnerability
- Zabbix Frontend Improper Access Control Vulnerability
- Zabbix Frontend Authentication Bypass Vulnerability
- Nagios XI OS Command Injection
- Nagios XI OS Command Injection
- Nagios XI OS Command Injection
- Nagios XI Remote Code Execution Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 0 | 0 |
| 2025 | 3 | 0 |
| 2024 | 1 | 0 |
| 2023 | 0 | 0 |
| 2022 | 5 | 0 |
Questions
Are network monitoring tools (WhatsUp Gold, PRTG, Zabbix, Nagios) safe right now?
No network monitoring tool flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 3, 2025). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many network monitoring tools vulnerabilities have been exploited?
10 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 1 of them used by ransomware.
Covers products matching whatsup gold, prtg, paessler, zabbix, nagios. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.