CVE-2025-32440 - CVE House
Back to Database
Status published Critical CVE-2025-32440

NetAlertX Vulnerable to Authentication Bypass

Vulnerability Description

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php. This issue has been patched in version 25.4.14.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-32440

Credits & Attribution

No credits recorded in the NVD database.

References

More from jokob-sk

View All →
CVE-2025-48952
NetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP
Critical 9.4

Affected Vendor

Affected Software

NetAlertX
Vulnerable Versions:
< 25.4.14

Timeline

Official Publish: May 27th, 2025
Last Modified: May 28th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1136 Create Account
Persistence
T1098 Account Manipulation
Privilege Escalation
T1021 Remote Services
Lateral Movement