CVE-2026-2042

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability.

The specific flaw exists within the monitoringwizard module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28245.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Feb 20, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-204206.5In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connectCVE-2026-204216.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2026-204226.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2026-204237.8In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2026-204244.4In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicCVE-2026-204256.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2026-204266.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2026-204276.7In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if aCVE-2026-204286.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2026-204294.4In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicCVE-2026-20438.8Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attCVE-2026-204308.8In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escal
CVE-2026-2042: High severity, CVSS 8.8 | Vulnix