EXPOSURES › CVE-2018-9276

CVE-2018-9276

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-02-04 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2018-9276 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wild

PRTG Network Monitor allowed administrative privilege escalation via OS command injection, actively exploited in the wild.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Paessler · vendor PRTG Network Monitor · product

DESCRIPTION

Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.