Nagios Core versions prior to 4.2.2 suffer from a curl command injection vulnerability that can lead to remote code execution.