CVE-2024-48766: Netalertx

High severity, CVSS 8.6. EPSS: 67.7% chance of exploitation in the next 30 days.

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.

Affected products

• Netalertx Netalertx: from 24.7.18, before 24.10.12 (fixed in 24.10.12)

Published 2025-05-13. Last modified 2026-06-17.