Login Request a demo
LI
Product
librenms
by librenms · last CVE Oct 12, 2026
124
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities124In the news0Timeline
Severity mix
Critical 9High 26Medium 87Low 2
Severity
All severities124Critical9High26Medium87Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add librenms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3561
6.1
1%
Nov 20
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0
Affected: before 22.10.0
CVE-2022-3516
6.1
0%
Nov 20
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0
Affected: before 22.10.0
CVE-2022-36746
6.1
1%
Aug 30
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php
Affected: 22.6.0
CVE-2022-36745
6.1
1%
Aug 30
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php
Affected: 22.6.0
CVE-2022-29711
6.1
1%
Jun 2
LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php
Affected: 22.3.0
CVE-2022-0576
6.1
1%
Feb 14
Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0
Affected: before 22.2.0
CVE-2021-44279
6.1
1%
Dec 1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php
Affected: 21.11.0
CVE-2021-44277
6.1
1%
Dec 1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php
Affected: 21.11.0
CVE-2021-43324
6.1
1%
Nov 3
LibreNMS through 21.10.2 allows XSS via a widget title
Affected: through 21.10.2
CVE-2019-10670
6.1
1%
Sep 9
An issue was discovered in LibreNMS through 1.47
Affected: through 1.47
CVE-2018-18478
6.1
2%
Oct 18
Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the…
Affected: before 1.44
CVE-2017-16759
5.9
2%
Nov 9
The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php
Affected: through 1.30
CVE-2026-84193
5.8
0%
Sep 1
LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
Affected: through 26.2.0
CVE-2025-65093
5.5
4%
Nov 18
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Affected: < 25.11.0
CVE-2026-45694
5.4
0%
Aug 26
LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters
Affected: < 26.5.0
CVE-2026-27016
5.4
0%
Feb 20
LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()
Affected: >= 24.10.0, < 26.2.0
CVE-2025-68614
5.4
4%
Dec 22
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
Affected: < 25.12.0
CVE-2025-55296
5.4
15%
Aug 18
librenms is a community-based GPL-licensed network monitoring system
Affected: before 25.8.0
CVE-2025-23200
5.4
32%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.11.0
CVE-2025-23199
5.4
1%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.11.0
CVE-2025-23198
5.4
0%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.11.0
CVE-2024-56144
5.4
0%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.12.0
CVE-2024-53457
5.4
46%
Dec 5
A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a…
Affected: 24.9.0 through 24.10.0
CVE-2024-52526
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: 24.10.0
CVE-2024-51497
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-51496
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-51495
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-51494
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-50352
5.4
41%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-50351
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-50350
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-49764
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-49759
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-49754
5.4
74%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-47527
5.4
1%
Oct 1
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.9.0
CVE-2024-47525
5.4
30%
Oct 1
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.9.0
CVE-2024-47523
5.4
1%
Oct 1
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.9.0
CVE-2024-32479
5.4
34%
Apr 22
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.4.0
CVE-2023-48295
5.4
1%
Nov 17
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems
Affected: before 23.11.0
CVE-2023-4982
5.4
1%
Sep 15
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 23.9.0
Affected: before 23.9.0
CVE-2023-4981
5.4
1%
Sep 15
Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0
Affected: before 23.9.0
CVE-2023-4980
5.4
1%
Sep 15
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 23.9.0
Affected: before 23.9.0
CVE-2023-4979
5.4
1%
Sep 15
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0
Affected: before 23.9.0
CVE-2023-4977
5.4
1%
Sep 15
Code Injection in GitHub repository librenms/librenms prior to 23.9.0
Affected: before 23.9.0
CVE-2023-4347
5.4
70%
Aug 15
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0
Affected: before 23.8.0
CVE-2022-4068
5.4
38%
Nov 20
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session
Affected: before 22.10.0
CVE-2022-4067
5.4
94%
Nov 20
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0
Affected: before 22.10.0
CVE-2022-3562
5.4
94%
Nov 20
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0
Affected: before 22.10.0
CVE-2022-3231
5.4
1%
Sep 17
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0
Affected: before 22.9.0
CVE-2022-0589
5.4
1%
Feb 15
Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0
Affected: before 22.1.0
Page 2 of 3 · 124 total
123