CVE-2021-33177

CVE-2021-33177 is a high-severity SQL injection vulnerability affecting Nagios XI versions prior to 5.8.5, specifically within its Bulk Modifications functionality. An authenticated attacker can exploit this flaw remotely with low complexity to execute arbitrary SQL queries, potentially leading to full compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness despite its inactive status on the CISA Hot List.