VYPR

NetAlertX

by Jokob Sk

CVEs (2)

  • CVE-2025-32440CriMay 27, 2025
    risk 0.65cvss 10.0epss 0.01

    NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted…

  • CVE-2025-48952CriJul 4, 2025
    risk 0.61cvss 9.4epss 0.01

    NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application,…