PT-2025-23041 · Netalertx · Netalertx

Nicocha30

·

Published

2025-05-27

·

Updated

2025-07-11

·

CVE-2025-32440

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NetAlertX version 25.4.13 and earlier
Description NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to "/index.php".
Recommendations For versions prior to 25.4.14, update to version 25.4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/index.php" endpoint to minimize the risk of exploitation. Additionally, avoid using sensitive functions within util.php until the issue is resolved.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-32440
GHSA-H4X5-VR54-VJRX

Affected Products

Netalertx