Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-46506
10
CRITICALCVSS v3
Published
May 13, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.
netalertx/NetAlertX
GitHubCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
GitHubCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.>= 23.01.14, < 24.10.12NVD