ZDI-26-073
HIGH 7.2
Published
Feb 12, 2026
Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
Nagios
A high-severity remote code execution vulnerability exists in Nagios Host (CVE-2026-2041) that allows authenticated attackers to execute arbitrary code on vulnerable systems. While exploitation requires valid credentials, this could enable attackers with legitimate access to compromise affected installations and potentially move laterally through monitored environments. Security teams should prioritize patching Nagios Host systems and review access controls to limit who can authenticate to these monitoring platforms.