Paessler vulnerabilities

CVE-2026-4638 High · 7.1 CWE-209 Sep 24, 2026

Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG provides a documented placeholder variable, %windowspassword, which resolves to the configured Windows/domain password used by PRTG and can be passed as a sensor parameter. Any PRTG user who is not restricted to read-only access and is permitted to create sensors (the default for non-read-only users) can pass %windowspassword as an argument to the demo VBScript sensor, triggering the type-mismatch error and causing PRTG to display the plaintext password in the sensor's error output.

CVE-2026-4637 Medium · 5.1 CWE-79 Sep 24, 2026

Reflected Cross-Site Scripting via URL Path in Paessler PRTG Network Monitor

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting (XSS) vulnerability. When a request is made for a non-existent resource ending in \".htm\", the web interface returns an HTTP 403 \"Forbidden Path\" error page that echoes the requested URL path into the HTML response body without proper output encoding or sanitization. An unauthenticated, remote attacker can craft a URL containing an HTML/JavaScript payload in the path (e.g. https:////welcome.htm) and, once a victim with an active PRTG session opens the crafted link, execute arbitrary JavaScript in the security context of the PRTG web interface. Because the PRTG session cookie is not protected with the HttpOnly attribute, successful exploitation allows the attacker to read and exfiltrate the victim's session cookie, potentially leading to session hijacking.

CVE-2023-45858 High · 8.6 CWE-23 Sep 14, 2026

Relative Path Traversal in Paessler Prtg Network Monitor

A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.

CVE-2023-28148 High · 7.2 CWE-79 Sep 14, 2026

Cross-site Scripting (XSS) in Paessler Prtg Network Monitor

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.

CVE-2023-22632 Low · 2.7 CWE-88 Sep 14, 2026

Argument Injection in Paessler Prtg Network Monitor

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.

CVE-2023-22631 Low · 2.7 CWE-88 Sep 14, 2026

Argument Injection in Paessler Prtg Network Monitor

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.

CVE-2025-67835 Medium · 6.5 CWE-400 Jan 14, 2026

Uncontrolled Resource Consumption in Paessler Prtg Network Monitor

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts functionality.

CVE-2025-67834 Medium · 5.4 CWE-79 Jan 14, 2026

Cross-site Scripting (XSS) in Paessler Prtg Network Monitor

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter.

CVE-2025-67833 Medium · 6.1 CWE-79 Jan 14, 2026

Cross-site Scripting (XSS) in Paessler Prtg Network Monitor

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter.

CVE-2018-19410 Critical · 9.8 KEV Urgent · 73 Public exploit Nov 21, 2018

Paessler PRTG Network Monitor Local File Inclusion Vulnerability

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).

CVE-2018-9276 High · 7.2 KEV Urgent · 76 Public exploit CWE-78 Jul 2, 2018

Paessler PRTG Network Monitor OS Command Injection Vulnerability

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.