Live › vulnerability › CVE-2018-9276
Go to dashboardPaessler PRTG Network Monitor has an OS command injection flaw in its System Administrator web console. An attacker with administrative access can run arbitrary operating system commands on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| paessler prtg network monitor | vendor | < 18.2.39 | 18.2.39 |
| paessler prtg network monitor | vendor | > 19.3.52, < 21.2.68 | 21.2.68 |
| Paessler PRTG Network Monitor | vendor | – | – |
Unknown from the sources.
Apply the vendor mitigations per Paessler instructions, or discontinue use of PRTG if mitigations are unavailable (per CISA KEV required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.
This page as .md · .json · in your agent: get_signal("CVE-2018-9276")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.