CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,440 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,440
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product paessler:prtg_network_monitor. Show all products

11 CVEs, showing 1 to 11
CVESeverityTitlePublished
CVE-2026-4638High 7.1Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor
Assigned by SEC-VLab
Sep 24, 2026
CVE-2026-4637Medium 5.1Reflected Cross-Site Scripting via URL Path in Paessler PRTG Network Monitor
Assigned by SEC-VLab
Sep 24, 2026
CVE-2023-45858High 8.6A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.
Assigned by mitre
Sep 14, 2026
CVE-2023-28148High 7.2A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.
Assigned by mitre
Sep 14, 2026
CVE-2023-22632Low 2.7PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.
Assigned by mitre
Sep 14, 2026
CVE-2023-22631Low 2.7PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.
Assigned by mitre
Sep 14, 2026
CVE-2025-67835Medium 6.5Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts functionality.Jan 14, 2026
CVE-2025-67834Medium 5.4Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter.Jan 14, 2026
CVE-2025-67833Medium 6.1Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter.Jan 14, 2026
CVE-2018-19410
Known exploited
Critical 9.8PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator).
Assigned by mitre
Nov 21, 2018
CVE-2018-9276
Known exploited
High 7.2An issue was discovered in PRTG Network Monitor before 18.2.39.
Assigned by mitre
Jul 2, 2018

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.