Authentication Bypass Flaw in NetAlertX Network Scanner
CVE-2025-32440
9.8CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-32440?
NetAlertX, a network and presence scanning solution, has a vulnerability that allows attackers to bypass the authentication mechanism prior to version 25.4.14. This vulnerability permits unauthorized individuals to manipulate settings by sending arbitrary requests to the system, specifically targeting /index.php and executing sensitive functions through util.php. A patch addressing this issue is available in version 25.4.14, emphasizing the importance of upgrading to safeguard your network environment.
Affected Version(s)
NetAlertX < 25.4.14
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.