13 critical vulnerabilities were detected in Nagios XI and Nagios Fusion servers by the security analysts at Skylight Cyber. The exploitation of these vulnerabilities could allow an attacker to compromise an IT network of an organization without any intervention of the operator. Nagios gets a report regarding the privilege escalation flaws as well as the authenticated remote code execution (RCE) in October 2020, and later Nagios has rectified the flaws in November 2020. The researchers have built a full-fledged attack manifesto and named it as SoyGun to compromise this attack.”]
Source: https://gbhackers.com/13-vulnerabilities-in-nagios-server/