Paessler

Known Exploited Paessler Vulnerabilities

The following Paessler vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Of the known exploited vulnerabilities above, 2 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings.

By the Year

In 2026 there have been 9 vulnerabilities in Paessler with an average score of 5.7 out of ten. Last year, in 2025 Paessler had 1 security vulnerability published. That is, 8 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.39

Recent Paessler Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-4638	Sep 24, 2026	PRTG <26.2.120.1449 Demo VBScript Sensor Exposes %windowspassword PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG provides a documented placeholder variable, %windowspassword, which resolves to the configured Windows/domain password used by PRTG and can be passed as a sensor parameter.  Any PRTG user who is not restricted to read-only access and is permitted to create sensors (the default for non-read-only users) can pass %windowspassword as an argument to the demo VBScript sensor, triggering the type-mismatch error and causing PRTG to display the plaintext password in the sensor's error output.	Prtg Network Monitor
CVE-2026-4637	Sep 24, 2026	Paessler PRTG Network Monitor XSS before 26.2.120.1449 (CVE-2026-4637) Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting (XSS) vulnerability. When a request is made for a non-existent resource ending in \".htm\", the web interface returns an HTTP 403 \"Forbidden Path\" error page that echoes the requested URL path into the HTML response body without proper output encoding or sanitization. An unauthenticated, remote attacker can craft a URL containing an HTML/JavaScript payload in the path (e.g. https:////welcome.htm) and, once a victim with an active PRTG session opens the crafted link, execute arbitrary JavaScript in the security context of the PRTG web interface. Because the PRTG session cookie is not protected with the HttpOnly attribute, successful exploitation allows the attacker to read and exfiltrate the victim's session cookie, potentially leading to session hijacking.	Prtg Network Monitor
CVE-2023-22632	Sep 14, 2026	PRTG Network Monitor <23.1.82 Remote File Write via FTP Server Count Sensor PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.	Prtg Network Monitor
CVE-2023-22631	Sep 14, 2026	PRTG Network Monitor <23.1.82: Remote File Write via HTTP REST Sensor PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.	Prtg Network Monitor
CVE-2023-28148	Sep 14, 2026	PRTG Network Monitor XSS via bodyclass before 23.3.86.1520 A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.	Prtg Network Monitor
CVE-2023-45858	Sep 14, 2026	PRTG <=23.4.88.1428 Directory Traversal (read local files) A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.	Prtg Network Monitor
CVE-2025-67833	Jan 14, 2026	PRTG Network Monitor XSS via tag param before 25.4.114 Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter.	Prtg Network Monitor
CVE-2025-67834	Jan 14, 2026	PRTG Network Monitor <=25.4.113 XSS via filter parameter Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter.	Prtg Network Monitor
CVE-2025-67835	Jan 14, 2026	PRTG Network Monitor <25.4.114 Authenticated DoS via Notification Contacts Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts functionality.	Prtg Network Monitor
CVE-2024-12833	Feb 11, 2025	PRTG Network Monitor XSS Auth Bypass via Web Interface Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Paessler PRTG Network Monitor. Some user interaction on the part of an administrator is required to exploit this vulnerability. The specific flaw exists within the PRTG Network Monitor web interface. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-23371.	Prtg Network Monitor