NetAlertX vulnerabilities

2 known vulnerabilities in NetAlertX from Jokob-sk. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  NetAlertX: Incorrect Comparison

  CVE-2025-48952Jul 4, 2025Jokob-sk

  NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions

• 9.8 Critical severity

  NetAlertX: Missing Authentication for Critical Functionality

  CVE-2025-32440May 27, 2025Jokob-sk

  NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by