Threats tagged 'ghsa-p9vf-j43m-6hqh'

Nagios XI versions prior to 2026R1 have a remote code execution vulnerability in the Core Config Manager's Run Check command. This flaw allows an authenticated administrator to inject shell metacharacters due to insufficient validation of parameters, leading to arbitrary command execution with the privileges of the Nagios XI web application user. Exploitation can result in control over the underlying host operating system.