ZDI-26-073 HIGH 7.2 Published Feb 12, 2026

Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

Nagios

A high-severity remote code execution vulnerability exists in Nagios Host (CVE-2026-2041) that allows authenticated attackers to execute arbitrary code on vulnerable systems. While exploitation requires valid credentials, this could enable attackers with legitimate access to compromise affected installations and potentially move laterally through monitored environments. Security teams should prioritize patching Nagios Host systems and review access controls to limit who can authenticate to these monitoring platforms.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy