【中文导读】该 CVE 涉及命令注入（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.