CVE Watch—

CVE-2018-19410

Paessler PRTG Network Monitor Local File Inclusion Vulnerability

CVSS

—

No CVSS

EPSS

97.9%

p100

KEV

YES

Feb 4, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

86.5%EPSS · 30 days97.9%

2026-08-022026-08-30

KEV catalog record

Product

Paessler / PRTG Network Monitor

Vulnerability

Paessler PRTG Network Monitor Local File Inclusion Vulnerability

Added to KEV

Feb 4, 2025

Remediate by

Feb 25, 2025

Known ransomware use

Summary description

Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.paessler.com/prtg/history/prtg-18#18.2.41.1652 ; https://nvd.nist.gov/vuln/detail/CVE-2018-19410

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-9276—

99.7%

KEV—80Paessler PRTG Network Monitor OS Command Injection Vulnerability—