OPS INTEL

HIGH 95% confidence cve

ZDI-26-073 Nagios Host Vulnerability

Learn about the critical command injection RCE vulnerability in Nagios Host requiring authentication. CVSS rating of 7.2. Includes severity, confidence, and act

['RCE impacts server security', 'CVSS rating of 7.2 indicates high risk', 'Requires immediate mitigation']

Nagios Host usersSystem Administrators

action items (2)

• Update affected components immediately
• Review access controls

Zero Day Initiative · 2026-02-23T17:01

HIGH 90% confidence cve

ZDI-26-072: Nagios Host esensors_websensor_configwizard_func Command Injection Vulnerability

Remote attackers can execute arbitrary code on Nagios Host due to a command injection vulnerability. Requires authentication, CVSS rating of 7.2. Includes sever

['Vulnerability exists due to insufficient input validation for the affected function.', 'Allows unauthorized execution of system commands with privileges granted by valid credentials.']

LinuxWindows

action items (2)

• Check for and apply available security updates for Nagios Host.
• Review system configurations and tighten authentication requirements for critical functions.

Zero Day Initiative · 2026-02-23T16:31

HIGH 95% confidence cve

Nagios Host Monitoringwizard Command Injection RCE Vulnerability

Critical command injection flaw in Nagios Host's monitoring wizard requires authentication but enables remote code execution. CVE-2026-2042. Includes severity,

['Lack of proper validation and sanitization in input fields']

IT infrastructure with Nagios Host Monitoring Wizard installed

action items (2)

• Update Nagios to the latest version
• Review and restrict user permissions

Zero Day Initiative · 2026-02-23T16:01

HIGH 95% confidence outage

83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting

83% of exploits targeting Ivanti EPMM flaw traced back to single IP on bulletproof hosting. GreyNoise reports 417 exploitation sessions from 8 unique IPs. Read

['Vulnerability in EPMM exposes organizations to targeted attacks', 'Bulletproof hosting allows malicious actors to evade detection and enforcement']

Enterprise IT systemsManaged service providers using Ivanti EPMM

action items (2)

• Review system logs for suspicious activity related to the affected IP address
• Update EPMM to mitigate against newly disclosed vulnerabilities

The Hacker News · 2026-02-23T15:31

HIGH 85% confidence outage

Weekly Recap: Docker Malware Incidents Rise

The Hacker News reports on rising incidents of Docker malware as part of their weekly security recap. Includes severity, confidence, and actionable response gui

['Lack of proper image verification and container hardening practices', 'Over-reliance on third-party repositories without due diligence']

Docker UsersDevOps Teams

action items (2)

• Review all active Docker images for signs of compromise
• Update and enforce internal guidelines on Docker best practices

The Hacker News · 2026-02-23T13:31