Vulnerabilities

TI-2026-04040 CVE-2026-4638 · GHSA-gh9q-9rjg-9rq2

Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor

LOW 31

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00305 Published 2026-09-24 Fixed in 26.2.120.1449 CWE-209

TI-2026-04039 CVE-2026-4637 · GHSA-xp6x-3pcm-f3ph

MEDIUM 62

Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00596 Published 2026-09-24 Fixed in 26.2.120.1449 CWE-79