Summary
Ein Angreifer kann mehrere Schwachstellen in Paessler PRTG ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.
Product
PRTG Network Monitor ist eine Netzwerk Monitoring Werkzeug der Paessler AG.
Vulnerabilities 2
-
High 7.1
Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor
PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending…
-
Medium 5.1
Reflected Cross-Site Scripting via URL Path in Paessler PRTG Network Monitor
Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting (XSS) vulnerability. When a request is made for a non-existent resource ending in \".htm\", the web interface returns an HTTP 403 \"Forbidden Path\" err…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-85840, EUVD-2026-85847
-
#1
Initiale Fassung
References
-
SecConsult Advisory vom 2026-09-23
https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-paessler-prtg-network-monitor/
-
Vulnerabilities in PRTG prior v26.2.120.1449 vom 2026-09-23
https://paessler.freshdesk.com/en/support/solutions/articles/76000088640