NetAlertX vulnerabilities
We track 2 vulnerabilities in NetAlertX products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 13, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest NetAlertX vulnerabilities
- 8.6 High severity
NetAlertX: Improper Limitation of a Pathname to a Restricted Directory
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
- 10.0 Critical severity
NetAlertX: Missing Authentication for Critical Functionality
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.