An issue was discovered in PRTG 7.x through 19.4.53.
Priority LOW 25CWE-522Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-522.
Summary
An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials.
Why it matters now
EPSS 0.00272 19th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-19119
- 2026-10-03 Alias added: GHSA-mcpx-9c5r-qxfc
References
Advisory 4
- https://blog.paessler.com
- https://blog.paessler.com/prtg-release-19.4.54-includes-2-brand-new-sensors-for-disk-and-storage
- https://www.paessler.com/prtg/history/preview
- https://www.ptsecurity.com/ww-en/about/news/positive-technologies-helps-in-eliminating-vulnerability-in-software-for-monitoring-visualizing-and-controlling-conditions-of-it-infrastructure/
More Paessler Prtg Network Monitor vulnerabilities
- TI-2018-13743 PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to… KEVCVSS 3.1CRITICAL 9.8
- TI-2018-06724 An issue was discovered in PRTG Network Monitor before 18.2.39. KEVCVSS 3.1HIGH 7.2
- TI-2023-16035 A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom… CVSS 3.1HIGH 7.2
- TI-2022-16181 PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s… CVSS 3.1MEDIUM 5.3
- TI-2020-09265 PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to… CVSS 3.1MEDIUM 5.3
- TI-2020-08308 A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2019-19119 · CVE Program
- CVE-2019-19119 · NVD
- FIRST EPSS
- GHSA-mcpx-9c5r-qxfc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences