CVE-2025-32440(netalertx / netalertx)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php. This issue has been patched in version 25.4.14.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • netalertx

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Affected systems

Vendors
Products
netalertx

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-26: 210-26
Referenced assets1 URL
By indicator
Full discourse2 posts
  • ExploitGrid@exploitgrid

    ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2021-44228 (CVSS: 10) Apache Softw... CVE-2024-25600 (CVSS: 10) CVE-2025-32440 (CVSS: 10) jokob-sk CVE-2026-102255 (CVSS: 10) sonicwall CVE-2026-102785 (CVSS: 10) https://yootheme.com ..🧵👇

    20020131
    435 followersView on X
  • ExploitGrid@exploitgrid

    💀CRITICAL Exploits Trending (all CVSS 10) ├CVE-2026-102785 · YOOtheme (Joomla) · 2nd exploit listing in 3 days ├CVE-2026-102255 · SonicWall SMA1000 ·Check tool live ├CVE-2025-32440 · NetAlertX · Auth bypass PoC live ├CVE-2024-25600 · Bricks Builder challenge environment live

    0001079
    435 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appnetalertxnetalertx---

Explore more