CVE-2024-13996 — Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's password was changed. As a result, any pre-existing sessions (including those potent — CVE Database · The Intelligence Room