ZDI-26-072 HIGH 7.2 Published Feb 12, 2026

Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

Nagios

A high-severity remote code execution vulnerability (CVE-2026-2043) has been identified in Nagios Host that allows authenticated attackers to execute arbitrary code on affected systems. While exploitation requires valid authentication credentials, successful exploitation could give attackers complete control over the Nagios Host installation. Security teams should prioritize patching Nagios Host systems immediately and review access controls to limit who can authenticate to these critical monitoring systems.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy