https://pwn.watch/t/prtg Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 04 Feb 2025 00:00:00 GMT https://pwn.watch/i/paessler-prtg-network-monitor-cve-2018-19410 https://pwn.watch/i/paessler-prtg-network-monitor-cve-2018-19410 Tue, 04 Feb 2025 00:00:00 GMT critical <p>CVE-2018-19410: Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator). CVE-2018-9276: Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console. Added to CISA KEV on 2025-02-04.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-02-04: CISA added CVE-2018-19410 to the KEV catalog (due 2025-02-25).</li><li>2025-02-04: CISA added CVE-2018-9276 to the KEV catalog (due 2025-02-25).</li></ul> <p><strong>CVEs:</strong> CVE-2018-19410, CVE-2018-9276</p>