PT-2026-2922

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 25.4.114 Description Paessler PRTG Network Monitor is susceptible to a cross-site scripting XSS issue. An unauthenticated attacker can exploit this to inject malicious scripts through the filter...

CVE-2025-67833

Paessler PRTG Network Monitor versions prior to 25.4.114 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can exploit this issue by leveraging the tag parameter. To mitigate this risk, it is recommended to update the software to version 25.4.114 or later. ...

Paessler PRTG Network Monitor 安全漏洞

Paessler PRTG Network Monitor is a network monitoring software from the German company Paessler. A security vulnerability exists in Paessler PRTG Network Monitor versions prior to 25.4.114, which can be exploited by an authenticated attacker to conduct a denial-of-service attack via the Notify...

PRTG Network Monitor Command Injection

The vulnerability of the network monitoring software PRTG Network Monitor lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2025-67833: Improper Neutralization of Input During Web Page Generation

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter...

CVE-2025-67834

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...

CVE-2025-67833

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter...

CVE-2025-67835: Uncontrolled Resource Consumption

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

CVE-2025-67834

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...

CVE-2025-67835

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

EUVD-2026-2432

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...

PT-2026-2923

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 25.4.114 Description An authenticated attacker can cause a Denial-of-Service DoS condition through the Notification Contacts functionality. Recommendations Update to version 25.4.114 or later...

CVE-2025-67833

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter...

CVE-2025-67835

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

CVE-2025-67834: Improper Neutralization of Input During Web Page Generation

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter...

CVE-2025-67833

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter...

EUVD-2026-2425

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

CVE-2025-67834

Paessler PRTG Network Monitor versions prior to 25.4.114 are vulnerable to a Cross-Site Scripting (XSS) flaw. An unauthenticated attacker can exploit this vulnerability by injecting malicious scripts via the filter parameter. The impact allows for the execution of scripts in the context of the us...

CVE-2025-67835

Paessler PRTG Network Monitor versions prior to 25.4.114 are vulnerable to a Denial-of-Service (DoS) attack. An authenticated attacker can exploit the Notification Contacts functionality to cause a DoS condition, likely due to uncontrolled resource consumption (CWE-400). To remediate this issue, ...

CVE-2023-31452

A cross-site request forgery CSRF token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request. This could...