CVE-2026-63418

Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, check_icmp stores the number of hosts supplied through -H or --Host on the command line, or through --extra-opts files containing Host= entries, in an unsigned short. More than 65,535 hosts wrap the counter, causing process_arguments() to allocate an undersized hosts array and then write subsequent entries out of bounds before main() calls setuid(getuid()). On installations where check_icmp is setuid root, a local low-privileged attacker can corrupt heap memory while the process still has root privileges; reliable privilege escalation has not been demonstrated. Installations that use cap_net_raw file capabilities instead of setuid are not exposed to the privilege-escalation consequence. This issue is fixed in version 3.0.1.

• CWE-190
• CWE-787

• https://github.com/monitoring-plugins/monitoring-plugins/commit/c35c12e58d326ffbd6cfb3c9097653f9f3fb2f4a
• https://github.com/monitoring-plugins/monitoring-plugins/releases/tag/v3.0.1
• https://github.com/monitoring-plugins/monitoring-plugins/security/advisories/GHSA-xvvw-4j77-rp7q

Published

Nov 3, 2026

Last Modified

Nov 3, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63409Deskflow is a keyboard and mouse sharing app. From 1.17.0 un…8.2
• CVE-2026-6341Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 …4.3
• CVE-2026-63410secp256k1-native is a native C secp256k1 implementation for …5.9
• CVE-2026-63414Shopify App is a Rails engine for building Shopify applicati…7.6
• CVE-2026-63416draw.io is a configurable diagramming and whiteboarding appl…3.7
• CVE-2026-63417Logging Redactor is a Python library designed to redact sens…8.2
• CVE-2026-63419OpenImageIO is a toolset for reading, writing, and manipulat…7.8
• CVE-2026-6342Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 …4.3
• CVE-2026-63420OpenImageIO is a toolset for reading, writing, and manipulat…5.5
• CVE-2026-63421Keystone is a content management system for Node.js. Prior t…7.5
• CVE-2026-63422OpenImageIO is a toolset for reading, writing, and manipulat…7.8
• CVE-2026-63423During an internal security assessment, a potential vulnerab…7.8