NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php. This issue has been patched in version 25.4.14.
References
| Link | Resource |
|---|---|
| https://github.com/jokob-sk/NetAlertX/releases/tag/v25.4.14 | Release Notes |
| https://github.com/jokob-sk/NetAlertX/security/advisories/GHSA-h4x5-vr54-vjrx | Vendor Advisory |
| https://github.com/jokob-sk/NetAlertX/security/advisories/GHSA-h4x5-vr54-vjrx | Vendor Advisory |
Configurations
History
11 Jul 2025, 18:58
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Netalertx netalertx
Netalertx |
|
| CPE | cpe:2.3:a:netalertx:netalertx:*:*:*:*:*:*:*:* | |
| References | () https://github.com/jokob-sk/NetAlertX/security/advisories/GHSA-h4x5-vr54-vjrx - Vendor Advisory | |
| References | () https://github.com/jokob-sk/NetAlertX/releases/tag/v25.4.14 - Release Notes |
28 May 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
27 May 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-27 22:15
Updated : 2025-07-11 18:58
NVD link : CVE-2025-32440
Mitre link : CVE-2025-32440
JSON object : View
Products Affected
netalertx
- netalertx
CWE
No CWE.