Jokob-Sk Netalertx vulnerabilities

CVE-2025-48952 [CRITICAL] CWE-697 CVE-2025-48952: NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerabil NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password comparison is performed using the `==` operator at line 40

CVE-2025-32440 [CRITICAL] CWE-306 CVE-2025-32440: NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possib NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php. This issue has been patched in version 25.4.14.