high Known exploitedREV. 01
CVE-2018-9276Paessler PRTG — administrator command injection in the console
The administration console of the network monitoring server (PRTG Network Monitor) before 18.2.39 passes malformed parameters into operating system commands, so an administrator runs code on the server and on the devices it watches.
Read the risk
THE VITAL STATS- CVSS score
- 7.2/ 10 CVSS v3.1
- EPSS probability
- 87% Likelihood of exploitation
- Attack complexity
- Low Conditions needed to exploit
- Known exploited
- Yes — CISA KEV
- CVE published
- 2018-07-02
- Added to KEV
- 2025-02-04
- Exploit published
- Yes
- Confidence
- high
- Kill chain
- execution
- MITRE ATT&CK
- T1059
- Severity
- high
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attacker needsAn administrative account on the console.
Behind the card
5 REFERENCES- 01CVE recordNVD recordnvd.nist.gov
- 02CISACISA Known Exploited Vulnerabilities catalogcisa.gov
- 03Exploitpacketstormsecurity.compacketstormsecurity.com
- 04Exploitpacketstormsecurity.compacketstormsecurity.com
- 05Exploitexploit-db.comexploit-db.com
Field-level provenanceTRACE THE SOURCES +
Which source supports each field, when it was retrieved, and who extracted it.
| Fields | Source | Retrieved | Extractor | Confidence |
|---|---|---|---|---|
| cvss, exploitation.attack_complexity, exploitation.exploit_available, references, published_at | nvd.nist.gov | 2026-09-24 | scrty-crds-pipeline/0.1 | high |
| exploitation.known_exploited, exploitation.kev_added | cisa.gov | 2026-09-24 | scrty-crds-pipeline/0.1 | high |
| epss | api.first.org | 2026-09-24 | scrty-crds-pipeline/0.1 | high |
| title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites | nvd.nist.gov | 2026-09-24 | claude-code | high |
Printing history
THE RECORD- r1Initial base card
First printing. This card has not been reprinted since publication.