HackerFeeds
All CVEs

CVE-2018-9276

HIGH7.2
CISA KEV

Published 2018-07-02 · Updated 2026-06-17 · Source cve@mitre.org

Summary

CVE-2018-9276 is a high-severity (CVSS 7.2) vulnerability in Paessler PRTG Network Monitor. CISA added it to the Known Exploited Vulnerabilities catalog on February 4, 2025, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by February 25, 2025. CISA does not currently list it as used in ransomware campaigns. Paessler has 2 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.

All 2 known-exploited Paessler vulnerabilities →

Description

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-78CWE-78

CISA Known-Exploited Vulnerability

Product: Paessler — PRTG Network Monitor

Name: Paessler PRTG Network Monitor OS Command Injection Vulnerability

Date added: 2025-02-04 · Due: 2025-02-25

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

References

View on NVD