← Vulnerability Intelligence

CVE-2018-9276

High 7.2 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Paessler PRTG Network Monitor OS Command Injection Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.

Metrics

CVSS 3.1
7.2 (HIGH) Score source: NVD CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
87% (percentile: 100) as of 1 November 2026
CWE
CWE-78

Affected products

paessler: prtg network monitor

References