Researchers disclosed details about 13 vulnerabilities in the Nagios network monitoring application that could be exploited for malicious purposes. The flaws discovered by the experts include Remote Code Execution issues and privilege escalation issues. The most severe vulnerability, tracked as CVE-2020-28648, is an improper input validation issue that resides in the Auto-Discovery component of Nagios XI. The flaw received a CVSS score of 8.8, it affects versions prior 5.7.5.5. The researchers reported the flaws to Nagios in October 2020 and the company addressed them in November.”]
Source: https://securityaffairs.co/wordpress/118207/hacking/nagios-it-monitoring-flaws.html