CVE-2018-19410VulnerabilityPublished 02/04/2025Updated 10/24/2026
CVE-2018-19410: Paessler PRTG Network Monitor Local File Inclusion Vulnerability
Affects Paessler PRTG Network MonitorSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 02/04/2025
- KEV deadline
- 02/25/2025
- EPSS
- 97.9% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).