Multiple vulnerabilities in Paessler PRTG network monitor

The Paessler PRTG Security Monitoring was affected by a reflected cross-site scripting vulnerability that allowed arbitrary JavaScript execution through unsanitized input in error responses. It also exposed domain credentials stored in plaintext to users with standard sensor creation privileges. Both issues could be exploited by authenticated users and may lead to session compromise or credential disclosure.
CVE-2026-4637, CVE-2026-4638

Read the full post here