Vulnerabilities (CVE)

Filtered by vendor Netalertx Subscribe
Filtered by product Netalertx
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-46506 1 Netalertx 1 Netalertx 2025-06-17 N/A 10.0 CRITICAL
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.