Paessler

Vulnerability activity for Paessler: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 4
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 7
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

7.2HighJul 2, 2018Paessler PRTG Network Monitor Code / command injectionCVE-2018-9276Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.Added to KEV Feb 4, 2025 · 2,408 days after publicationExploited87% likelyExploit codeExploit-DB · MetasploitDetection
9.8CriticalNov 21, 2018Paessler PRTG Network Monitor Path traversal / file handlingCVE-2018-19410Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).Added to KEV Feb 4, 2025 · 2,266 days after publicationExploited98% likelyExploit codeNucleiDetection

Recent

8.6HighSep 14, 2026Paessler PRTG Network Monitor Path traversal / file handlingCVE-2023-45858A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.
7.2HighSep 14, 2026Paessler PRTG Network Monitor XSSCVE-2023-28148A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.
2.7LowSep 14, 2026Paessler PRTG Network Monitor Code / command injectionCVE-2023-22632PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.
2.7LowSep 14, 2026Paessler PRTG Network Monitor Code / command injectionCVE-2023-22631PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.
6.5MediumJan 14, 2026Paessler prtg network monitor Denial of serviceCVE-2025-67835Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts functionality.
5.4MediumJan 14, 2026Paessler prtg network monitor XSSCVE-2025-67834Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter.
6.1MediumJan 14, 2026Paessler prtg network monitor XSSCVE-2025-67833Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter.
7.2HighJul 2, 2018Paessler PRTG Network Monitor Code / command injectionCVE-2018-9276Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.Exploited87% likelyExploit codeExploit-DB · MetasploitDetection
9.8CriticalNov 21, 2018Paessler PRTG Network Monitor Path traversal / file handlingCVE-2018-19410Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).Exploited98% likelyExploit codeNucleiDetection

See every Paessler entry on the dashboard.