Paessler vulnerabilities
We track 6 vulnerabilities in Paessler products. 6 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on September 24, 2026.
Latest Paessler vulnerabilities
- 7.1 High severity
PRTG Network Monitor: Generation of Error Message Containing Sensitive Information
PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending
- 7.2 High severity
Prtg Network Monitor: Improper Neutralization of Special Elements used in a Command
A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sen
- 7.2 High severity
Prtg Network Monitor: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Scrip
- 8.8 High severity
Prtg Network Monitor: Cross-Site Request Forgery
A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to tr
- 9.8 Critical severity
Paessler PRTG Network Monitor Local File Inclusion Exploited
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in
- 7.2 High severity
Paessler PRTG Network Monitor OS Command Injection Exploited
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by send