CVE-2016-9566

CVE-2016-9566 is a local privilege escalation vulnerability affecting Nagios Core versions prior to 4.2.4. It allows local users belonging to the 'nagios' group to gain root privileges through a symlink attack on the log file, and can be chained with CVE-2016-9565 for remote exploitation. This vulnerability is rated as High severity (CVSS 7.8), indicating a significant risk of complete compromise of confidentiality, integrity, and availability. While not on the KEV catalog, public exploit code exists (EDB-40921), and there has been notable community discussion and media coverage, including a demonstration video, suggesting active awareness and potential for exploitation.