{"id":"CVE-2018-9276","aliases":["EUVD-2018-20870","GHSA-cjqq-8xv6-575p"],"status":"published","title":"An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the...","description":"An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.86996,"percentile":0.99749,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2018-07-02T16:00:00Z","modified":"2026-06-17T02:06:20Z","kev":{"date_added":"2025-02-04","due_date":"2025-02-25","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-02-04"},{"source":"kev","since":"2025-02-04"}],"exploits":[{"source":"metasploit","id":"exploit/windows/http/prtg_authenticated_rce","title":"PRTG Network Monitor Authenticated RCE","type":"exploit","platform":"Windows","date":"2018-06-25","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/prtg_authenticated_rce"},{"source":"exploitdb","id":"EDB-46527","title":"PRTG Network Monitor 18.2.38 - (Authenticated) Remote Code Execution","type":"webapps","platform":"windows","date":"2019-03-11","url":"https://www.exploit-db.com/exploits/46527"},{"source":"pocgithub","id":"wildkindcc/CVE-2018-9276","title":"wildkindcc/CVE-2018-9276","date":"2019-03-31","url":"https://github.com/wildkindcc/CVE-2018-9276"},{"source":"pocgithub","id":"andyfeili/CVE-2018-9276","title":"andyfeili/CVE-2018-9276","date":"2021-01-02","url":"https://github.com/andyfeili/CVE-2018-9276"},{"source":"pocgithub","id":"alvinsmith-eroad/CVE-2018-9276","title":"alvinsmith-eroad/CVE-2018-9276","date":"2021-07-29","url":"https://github.com/alvinsmith-eroad/CVE-2018-9276"},{"source":"pocgithub","id":"AC8999/PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276","title":"AC8999/PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276","date":"2026-04-07","url":"https://github.com/AC8999/PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276"},{"source":"pocgithub","id":"BardLaudian/CVE-2018-9276","title":"BardLaudian/CVE-2018-9276","date":"2026-06-13","url":"https://github.com/BardLaudian/CVE-2018-9276"}],"products":[{"vendor":"paessler","product":"prtg network monitor"},{"vendor":"paessler","product":"prtg_network_monitor"}],"references":[{"url":"http://packetstormsecurity.com/files/148334/PRTG-Command-Injection.html","tags":["x_refsource_MISC","x_transferred","Exploit","Mitigation","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/46527/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/542103/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/161183/PRTG-Network-Monitor-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-9276","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9276"},{"url":"https://www.exploit-db.com/exploits/46527"},{"url":"https://github.com/advisories/GHSA-cjqq-8xv6-575p"}],"sources":{"cve":[{"id":"CVE-2018-9276","description":"An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.","status":"published","published":"2018-07-02T16:00:00Z","modified":"2025-10-21T23:45:50.232Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:02.289647Z"}],"euvd":[{"id":"EUVD-2018-20870","description":"An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.","status":"published","published":"2018-07-02T16:00:00Z","modified":"2025-10-21T23:45:50Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2025-02-04","updated_at":"2026-11-02T20:31:23.427989Z"}],"ghsa":[{"id":"GHSA-cjqq-8xv6-575p","title":"An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the...","description":"An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.","status":"published","published":"2022-05-13T01:10:53Z","modified":"2025-10-22T00:32:37Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:04:05.954742Z"}],"kev":[{"id":"CVE-2018-9276","title":"Paessler PRTG Network Monitor OS Command Injection Vulnerability","description":"Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.","cwes":["CWE-78"],"kev":{"date_added":"2025-02-04","due_date":"2025-02-25","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2018-9276","description":"An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.","status":"published","published":"2018-07-02T16:29:00.6Z","modified":"2026-06-17T02:06:20.513Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:04:30.900603Z"}]}}