PatchTheCVEnetwrix vulnerabilities
Recent CVEs affecting netwrix products. 13 tracked.
netwrix has 13 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-08-07. Highest priority: CVE-2025-26817 (score 58/100).
- CVE-2025-54397 MEDIUM 4.3 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Informati
- CVE-2025-54396 MEDIUM 5.4 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection
- CVE-2025-54395 MEDIUM 6.1 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authenticati
- CVE-2025-54394 MEDIUM 5.3 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protecte
- CVE-2025-54393 MEDIUM 5.4 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injectio
- CVE-2025-54392 MEDIUM 6.1 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authenticati
- CVE-2025-48749 CRITICAL 9.1 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sens
- CVE-2025-48748 CRITICAL 10.0 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.
- CVE-2025-48747 MEDIUM 5.0 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03
- CVE-2025-48746 MEDIUM 6.5 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 l
- CVE-2025-47748 MEDIUM 5.3 UPGRADE Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.
- CVE-2025-26818 CRITICAL 9.8 UPGRADE Netwrix Password Secure through 9.2 allows command injection.
- CVE-2025-26817 CRITICAL 9.8 UPGRADE Netwrix Password Secure 9.2.0.32454 allows OS command injection.
FAQ
How do I fix netwrix vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netwrix being exploited right now?
None of the tracked netwrix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netwrix CVE should I patch first?
CVE-2025-26817 currently ranks highest (58/100): Netwrix Password Secure 9.2.0.32454 allows OS command injection..