pnetlab vulnerabilities and fixes

Recent CVEs affecting pnetlab, with upgrade or downgrade steps. 3 tracked.

pnetlab has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-18. Highest priority: CVE-2025-63749 (score 48/100).

• CVE-2024-51112 MEDIUM 6.1 DOWNGRADE Open Redirect vulnerability in Pnetlab 5.3.11 allows an attacker to manipulate URLs to redirect users to arbit
• CVE-2024-51111 MEDIUM 4.1 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in Pnetlab 5.3.11 allows an attacker to inject malicious scripts into
• CVE-2025-63749 MEDIUM 6.5 DOWNGRADE pnetlab 5.3.11 is vulnerable to Command Injection via the qemu_options parameter.

FAQ

How do I fix pnetlab vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is pnetlab being exploited right now?

None of the tracked pnetlab CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which pnetlab CVE should I patch first?

CVE-2025-63749 currently ranks highest (48/100): pnetlab 5.3.11 is vulnerable to Command Injection via the qemu_options parameter..

RSS feed for pnetlab · ← Back to latest CVEs