Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection).Referenceshttps://www.nagios.com/downloads/nagios-xi/change-log/