CVE-2024-46506
CRITICAL EXPLOITED NUCLEIUnauthenticated RCE in NetAlertX
Title source: metasploitExploitation Summary
CVE-2024-46506 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including fufu-byte, Chebuya (Rhino Security Labs), Takahiro Yokoyama, including a Metasploit module exploits/linux/http/netalertx_rce_cve_2024_46506.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Python script exploits CVE-2024-46506, an RCE vulnerability in NetAlertX versions 23.01.14 to 24.9.12. It abuses the settings update mechanism to inject arbitrary commands via the DBCLNP_CMD parameter and triggers execution through the task queue.
Description
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.
Exploits (2)
This Python script exploits CVE-2024-46506, an RCE vulnerability in NetAlertX versions 23.01.14 to 24.9.12. It abuses the settings update mechanism to inject arbitrary commands via the DBCLNP_CMD parameter and triggers execution through the task queue.
This Metasploit module exploits an unauthenticated RCE vulnerability in NetAlertX by updating settings to execute arbitrary commands via the DBCLNP_CMD parameter. It leverages the application's cron job execution mechanism to trigger the payload.
Nuclei Templates (1)
title="netalertx"
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H