VulnCheck KEV: CVE-2018-9276

🗓️ 04 Feb 2025 00:00:00Reported by VulnCheckType

System command injection in Paessler PRTG allows admins to execute commands via the System Administrator web console.

Reporter	Title	Published	Views	Family All 36
zdt	PRTG Network Monitor 18.2.38 - Authenticated Remote Code Execution Exploit	11 Mar 201900:00	–	zdt
zdt	PRTG Network Monitor Remote Code Execution Exploit	28 Jan 202100:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	13 Jun 202615:09	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	7 Apr 202621:20	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	29 Jul 202101:17	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paessler Prtg_Network_Monitor	31 Mar 201908:51	–	githubexploit
attackerkb	CVE-2018-9276	2 Jul 201800:00	–	attackerkb
BDU FSTEC	The vulnerability of network monitoring software for PRTG Network Monitor lies in the lack of measures to neutralize special elements used in the operating system’s command line. This allows a hacker to execute arbitrary code.	14 Jan 202600:00	–	bdu_fstec
Circl	CVE-2018-9276	27 Jan 202121:56	–	circl
CISA KEV Catalog	Paessler PRTG Network Monitor OS Command Injection Vulnerability	4 Feb 202500:00	–	cisa_kev

Vulncheck

Node

Source	Link
console	www.console.vulncheck.com/cve/CVE-2018-9276
cisa	www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
loginsoft	www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025

04 Feb 2025 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.2

CVSS 29

EPSS0.86996

SSVC