Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input read from the database.Referenceshttps://www.nagios.com/downloads/nagios-xi/change-log/