An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios.
Use CWE-78, Paessler vendor hub and Prtg Network Monitor product page to widen CVE-2018-9276 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2023-31452, CVE-2023-32782 and CVE-2023-32781 for nearby disclosures in the same product family. Additional editorial context is available in Why “Low” and “Medium” CVEs Still Breach Networks.