Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2018-9276

🗓️ 02 Jul 2018 16:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 478 Views🌐 WEB

An OS command injection vulnerability in PRTG Network Monitor before 18.2.3

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
zdt
zdt		PRTG Network Monitor 18.2.38 - Authenticated Remote Code Execution Exploit
11 Mar 201900:00
–zdt
zdt
zdt		PRTG Network Monitor Remote Code Execution Exploit
28 Jan 202100:00
–zdt
githubexploit
GithubExploit		Exploit for OS Command Injection in Paessler Prtg_Network_Monitor
13 Jun 202615:09
–githubexploit
githubexploit
GithubExploit		Exploit for OS Command Injection in Paessler Prtg_Network_Monitor
7 Apr 202621:20
–githubexploit
githubexploit
GithubExploit		Exploit for OS Command Injection in Paessler Prtg_Network_Monitor
31 Mar 201908:51
–githubexploit
attackerkb
ATTACKERKB		CVE-2018-9276
2 Jul 201800:00
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of network monitoring software for PRTG Network Monitor lies in the lack of measures to neutralize special elements used in the operating system’s command line. This allows a hacker to execute arbitrary code.
14 Jan 202600:00
–bdu_fstec
circl
Circl		CVE-2018-9276
27 Jan 202121:56
–circl
cisa_kev
CISA KEV Catalog		Paessler PRTG Network Monitor OS Command Injection Vulnerability
4 Feb 202500:00
–cisa_kev
cisa
CISA		 CISA Adds Four Known Exploited Vulnerabilities to Catalog
4 Feb 202512:00
–cisa
Rows per page
NVD
Node
OR
paesslerprtg_network_monitorRange<18.2.39
paesslerprtg_network_monitorRange19.3.52–21.2.68
ParameterPositionPathDescriptionCWE
address_10nestededitsettingsAuthenticated RCE via notification script creation: user-supplied command injected through notification payload (script name and message) during managed notification setup, exploiting OS command injection in PRTG Network Monitor prior to 18.2.39.CWE-78
message_10nestededitsettingsAuthenticated RCE via notification script creation: user-supplied command injected through notification payload (script name and message) during managed notification setup, exploiting OS command injection in PRTG Network Monitor prior to 18.2.39.CWE-78

CVE-2018-9276 An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command inject... https://t.co/2bd1Dx11B6?amp=1

Today's #Metasploit team demo meeting recording is available! Includes demos for modules targeting CVE-2021-3156 (a.k.a. Baron Samedit) and CVE-2018-9276 (PRTG Network Monitor Authenticated RCE), plus recent improvements and fixes. Catch it here:

NEW: CVE-2018-9276 An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS comma... (click for more) Severity: HIGH https://t.co/Crxm1YFTzz?amp=1

CVE-2018-9276 An issue was discovered in PRTG Network Monitor before 18.2.39. An attack... https://t.co/2bd1Dx11B6?amp=1 Vulnerability Notification: https://t.co/xhLrNnfyrO?amp=1

Sekurenet

CISA adds 4 new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog! Apache OFBiz (CVE-2024-45195) Microsoft .NET Framework (CVE-2024-29059) Paessler PRTG Network Monitor (CVE-2018-9276, CVE-2018-19410) #CyberSecurity #CISA #PatchNow #Infosec

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 02:06Current
7High risk
Vulners AI Score7
CVSS 3.17.2
CVSS 29
EPSS0.87173
SSVC
CWE-78In Wild
cve-2018-9276prtg network monitoros command injectionsecurity vulnerabilitynvd
478