CVE-2018-9276

🗓️ 02 Jul 2018 16:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 497 Views🌐 WEB

An OS command injection vulnerability in PRTG Network Monitor before 18.2.3

Reporter	Title	Published	Views	Family All 36
zdt	PRTG Network Monitor 18.2.38 - Authenticated Remote Code Execution Exploit	11 Mar 201900:00	–	zdt
zdt	PRTG Network Monitor Remote Code Execution Exploit	28 Jan 202100:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	13 Jun 202615:09	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	7 Apr 202621:20	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	29 Jul 202101:17	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	31 Mar 201908:51	–	githubexploit
attackerkb	CVE-2018-9276	2 Jul 201800:00	–	attackerkb
BDU FSTEC	The vulnerability of network monitoring software for PRTG Network Monitor lies in the lack of measures to neutralize special elements used in the operating system’s command line. This allows a hacker to execute arbitrary code.	14 Jan 202600:00	–	bdu_fstec
Circl	CVE-2018-9276	27 Jan 202121:56	–	circl
CISA KEV Catalog	Paessler PRTG Network Monitor OS Command Injection Vulnerability	4 Feb 202500:00	–	cisa_kev

NVD

Node

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/161183/PRTG-Network-Monitor-Remote-Code-Execution.html
exploit-db	www.exploit-db.com/exploits/46527/
packetstormsecurity	www.packetstormsecurity.com/files/148334/PRTG-Command-Injection.html
securityfocus	www.securityfocus.com/archive/1/542103/100/0/threaded
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
loginurl	request body	/public/checklogin.htm	Authentication to access admin interface; prerequisite step in exploitation.	CWE-78
username	request body	/public/checklogin.htm	Authentication to access admin interface; prerequisite step in exploitation.	CWE-78
password	request body	/public/checklogin.htm	Authentication to access admin interface; prerequisite step in exploitation.	CWE-78
message_10	request body	/editsettings	Create a notification with attacker-controlled payload in message_10 enabling OS command injection.	CWE-78
id	request body	/api/notificationtest.htm	Trigger the malicious notification to execute the injected payload.	CWE-78
id	request body	/api/deleteobject.htm	Delete the created malicious notification to clean up.	CWE-78
approve	request body	/api/deleteobject.htm	Delete the created malicious notification to clean up.	CWE-78

17 Jun 2026 02:06Current

7High risk

Vulners AI Score7

CVSS 3.17.2

CVSS 29

EPSS0.86996

SSVC