PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-22631 Paessler CVE debrief

CVE-2023-22631 is a low-severity vulnerability in PRTG Network Monitor before version 23.1.82 that allows remote attackers to write to files via the HTTP XML/REST Sensor. The CVE record was published on 2026-09-14T04:16:33.853Z and has not been modified since then. The NVD entry is currently Deferred. Defenders responsible for systems using PRTG Network Monitor should assess exposure and impact, and consider applying the fix from the vendor, if available. The vulnerability has a CVSS score of 2.7 and a CVSS severity of LOW. It is essential for defenders to verify exposure by checking the version of PRTG Network Monitor in use and assess the impact of this vulnerability on their to

Vendor
Paessler
Product
PRTG Network Monitor
CVSS
LOW 2.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-14
Original CVE updated
2026-09-22
Advisory published
2026-09-14
Advisory updated
2026-09-22

Who should care

Defenders responsible for systems using PRTG Network Monitor should assess exposure and impact, and consider applying the fix from the vendor, if available.

Why it matters

CVE-2023-22631 is a low-severity vulnerability in PRTG Network Monitor that allows remote attackers to write to files via the HTTP XML/REST Sensor. Defenders should prioritize verifying exposure and assessing the impact of this vulnerability on their systems, particularly those using PRTG Network Monitor.

  • Verify exposure by checking the version of PRTG Network Monitor in use
  • Assess the impact of this vulnerability on systems using PRTG Network Monitor
  • Consider applying the fix from the vendor, if available

Technical summary

CVE-2023-22631 is a low-severity vulnerability in PRTG Network Monitor before version 23.1.82 that allows remote attackers to write to files via the HTTP XML/REST Sensor. The vulnerability has a CVSS score of 2.7 and a CVSS severity of LOW. The CVE record was published on 2026-09-14T04:16:33.853Z and has not been modified since then. The NVD entry is currently Deferred. Defenders should prioritize verifying exposure and assessing the impact of this vulnerability on their systems, particularly those using PRTG Network Monitor. The vulnerability allows remote to

Defensive priority

Defenders should prioritize verifying exposure and assessing the impact of this vulnerability on their systems, particularly those using PRTG Network Monitor.

Recommended defensive actions

  • Verify exposure by checking the version of PRTG Network Monitor in use
  • Assess the impact of this vulnerability on systems using PRTG Network Monitor
  • Consider applying the fix from the vendor, if available

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability, and defenders should exercise caution when assessing exposure and impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2023-22631 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2023-22631

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2023-22631 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2023-22631

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.