{"id":"CVE-2018-19410","aliases":["EUVD-2018-11103","GHSA-pm93-g4gf-j42f"],"status":"published","title":"PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users...","description":"PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.97939,"percentile":0.99908,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"published":"2018-11-21T16:00:00Z","modified":"2026-06-17T01:49:15Z","kev":{"date_added":"2025-02-04","due_date":"2025-02-25","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-02-04"},{"source":"kev","since":"2025-02-04"}],"exploits":[{"source":"pocgithub","id":"himash/CVE-2018-19410-POC","title":"himash/CVE-2018-19410-POC","date":"2024-01-25","url":"https://github.com/himash/CVE-2018-19410-POC"},{"source":"nuclei","id":"CVE-2018-19410","title":"PRTG Network Monitor - Local File Inclusion","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19410.yaml"}],"products":[{"vendor":"paessler","product":"prtg network monitor"},{"vendor":"paessler","product":"prtg_network_monitor"}],"references":[{"url":"https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-24/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-19410","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19410"},{"url":"https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-24"},{"url":"https://github.com/advisories/GHSA-pm93-g4gf-j42f"}],"sources":{"cve":[{"id":"CVE-2018-19410","description":"PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).","status":"published","published":"2018-11-21T16:00:00Z","modified":"2025-10-21T23:45:46.722Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"updated_at":"2026-11-02T14:35:02.966615Z"}],"euvd":[{"id":"EUVD-2018-11103","description":"PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).","status":"published","published":"2018-11-21T16:00:00Z","modified":"2025-10-21T23:45:46Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2025-02-04","updated_at":"2026-11-02T20:31:24.172282Z"}],"ghsa":[{"id":"GHSA-pm93-g4gf-j42f","title":"PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users...","description":"PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).","status":"published","published":"2022-05-13T01:50:52Z","modified":"2025-10-22T00:32:37Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:04:05.954742Z"}],"kev":[{"id":"CVE-2018-19410","title":"Paessler PRTG Network Monitor Local File Inclusion Vulnerability","description":"Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).","kev":{"date_added":"2025-02-04","due_date":"2025-02-25","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2018-19410","description":"PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).","status":"published","published":"2018-11-21T16:29:00.347Z","modified":"2026-06-17T01:49:15.64Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:48.987926Z"}]}}