# CVE-2023-22631: Paessler PRTG Network Monitor arbitrary file write in HTTP XML/REST Sensor

Source: https://junglewise.ai/threats/cve-2023-22631-paessler-prtg-network-monitor-arbitrary-file-write-in-http-xml  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-14. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2023-22631 · Severity: low · CVSS 2.7 · Published 2026-09-14

PRTG Network Monitor is an infrastructure monitoring platform that tracks servers, networks, and applications across IT environments. A vulnerability in the HTTP XML/REST Sensor component allows authenticated users to write arbitrary files to the probe system, potentially compromising system integrity and enabling further attacks.

Technologies: [Paessler PRTG Network Monitor](https://junglewise.ai/threats/technologies/prtg-network-monitor). Vendors: [Paessler](https://junglewise.ai/threats/vendors/paessler).

## Quick answers

**Is CVE-2023-22631 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2023-22631 being exploited in the wild.

**How severe is CVE-2023-22631?** Low severity, with a CVSS score of 2.7, published 14 September 2026.

**Which products and versions are affected?** Paessler PRTG Network Monitor before 23.1.82.

**Is there a fix for CVE-2023-22631?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2023-22631 attacked?** It is attacked over the network.

**Am I affected by CVE-2023-22631?** Check whether you run Paessler PRTG Network Monitor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an arbitrary file write flaw in certain EXE sensors, specifically affecting the HTTP XML/REST Value sensor. It requires an authenticated user with access to configure sensors to exploit. An attacker can craft malicious sensor configurations to write arbitrary files to the probe system where PRTG is running, potentially leading to code execution or system compromise. The vulnerability was addressed and fixed in PRTG version 23.1.82, released in May 2023. Users should upgrade to the patched version immediately.

## Affected products

- Paessler PRTG Network Monitor before 23.1.82

## Timeline

- 2023-05: disclosed: Vulnerability fixed in PRTG 23.1.82
- 2026-09-14: advisory

## References

- [https://helpdesk.paessler.com/en/support/solutions/articles/76000076688-is-prtg-affected-by-cve-2023-22631-or-cve-2023-22632-](https://helpdesk.paessler.com/en/support/solutions/articles/76000076688-is-prtg-affected-by-cve-2023-22631-or-cve-2023-22632-)
- [https://www.paessler.com/prtg](https://www.paessler.com/prtg)

## Related threats

- [Paessler PRTG Network Monitor password disclosure in demo sensor](https://junglewise.ai/threats/cve-2026-4638-prtg-network-monitor-before-version-26-2-120-1449-ships-a-demo-exe)
- [Paessler PRTG Network Monitor reflected XSS in error responses](https://junglewise.ai/threats/cve-2026-4637-paessler-prtg-network-monitor-before-version-26-2-120-1449-is)
- [Paessler PRTG cross-site scripting in body class](https://junglewise.ai/threats/cve-2023-28148-paessler-prtg-cross-site-scripting-in-body-class)
- [Paessler PRTG Network Monitor arbitrary file write via FTP Server Count Sensor](https://junglewise.ai/threats/cve-2023-22632-paessler-prtg-network-monitor-arbitrary-file-write-via-ftp-server)
- [Paessler PRTG Network Monitor Local File Inclusion Vulnerability](https://junglewise.ai/threats/cve-2018-19410-paessler-prtg-network-monitor-local-file-inclusion-vulnerability)