https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-32440.htmlhttps://patchthecve.com/cve/CVE-2025-32440.htmlWed, 17 Jun 2026 09:11:59 +0000CRITICAL 10.0: NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php.https://patchthecve.com/cve/CVE-2024-48766.htmlhttps://patchthecve.com/cve/CVE-2024-48766.htmlWed, 17 Jun 2026 07:58:45 +0000HIGH 8.6: NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.https://patchthecve.com/cve/CVE-2024-46506.htmlhttps://patchthecve.com/cve/CVE-2024-46506.htmlWed, 17 Jun 2026 07:55:27 +0000CRITICAL 10.0: NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.