monitoring-plugins vulnerabilities

3 known vulnerabilities in monitoring-plugins from Linuxfabrik. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  monitoring-plugins: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-55426Aug 18, 2026Linuxfabrik

  linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands. From the earliest affected releases until linuxfabrik-lib 5.

• 7.0 High severity

  monitoring-plugins: Improper Neutralization of Argument Delimiters in a Command

  CVE-2026-52817Aug 18, 2026Linuxfabrik

  Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restri

• 8.3 High severity

  Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and…

  CVE-2026-67436Jul 29, 2026Linuxfabrik

  Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish-* plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id