Skip to content
OpenAdvisories
Medium WID-SEC-2026-0406 3 CVEs

Nagios Enterprises Nagios XI: Mehrere Schwachstellen ermöglichen Codeausführung

Published Feb 12, 2026 · Updated Feb 12, 2026 · de-DE

Vendor: Nagios Enterprises, LLC. Product: Nagios XI Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nagios Enterprises Nagios XI ausnutzen, um beliebigen Programmcode auszuführen.

Product

Nagios XI ist eine auf der open-source Software Nagios basierende, aber um proprietäre Komponenten erweiterte kommerzielle Version, die eine Überwachung komplexer IT-Strukturen ermöglicht.

Vulnerabilities 3

  • High 7.2
    CVE-2026-2041 EPSS 76%

    Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

    Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerab…

    Nagios Host
  • High 7.2
    CVE-2026-2042

    Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability

    Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability. The sp…

    Nagios Host
  • High 7.2
    CVE-2026-2043 EPSS 75%

    Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

    Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this v…

    Nagios Host

Revision history

  1. #1

    Initiale Fassung

References