monitoring-plugins — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in monitoring-plugins, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-73974	linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE) CWE-22	5.5	Medium	2026-08-18
CVE-2026-73973	Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE) CWE-22	5.5	Medium	2026-08-18
CVE-2026-55426	linuxfabrik-lib: Local privilege escalation using embedded command CWE-78	7.8	High	2026-08-18
CVE-2026-53759	linuxfabrik-lib: Insecure creation of SQLite databases CWE-377	2.0	Low	2026-08-18
CVE-2026-52817	Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation CWE-88	7.0	High	2026-08-18
CVE-2026-67436	Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* plugins CWE-20	8.3	High	2026-07-29
CVE-2026-67435	linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect CWE-200	6.0	Medium	2026-07-29
CVE-2026-67433	Linuxfabrik monitoring-plugins: Symlink following in logfile legacy database migration CWE-59	5.8	Medium	2026-07-29

All 8 known CVE vulnerabilities affecting monitoring-plugins with full Chinese analysis, references, and POCs where available.