LI
Product
librenms
124
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 9High 26Medium 87Low 2
Watch
Add librenms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-47525 | 5.4 | Oct 1 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.9.0 |
| CVE-2024-47523 | 5.4 | Oct 1 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.9.0 |
| CVE-2024-32479 | 5.4 | Apr 22 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.4.0 |
| CVE-2023-48295 | 5.4 | Nov 17 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems Affected: before 23.11.0 |
| CVE-2023-4982 | 5.4 | Sep 15 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 23.9.0 Affected: before 23.9.0 |
| CVE-2023-4981 | 5.4 | Sep 15 | Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0 Affected: before 23.9.0 |
| CVE-2023-4980 | 5.4 | Sep 15 | Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 23.9.0 Affected: before 23.9.0 |
| CVE-2023-4979 | 5.4 | Sep 15 | Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0 Affected: before 23.9.0 |
| CVE-2023-4977 | 5.4 | Sep 15 | Code Injection in GitHub repository librenms/librenms prior to 23.9.0 Affected: before 23.9.0 |
| CVE-2023-4347 | 5.4 | Aug 15 | Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0 Affected: before 23.8.0 |
| CVE-2022-4068 | 5.4 | Nov 20 | A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session Affected: before 22.10.0 |
| CVE-2022-4067 | 5.4 | Nov 20 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0 Affected: before 22.10.0 |
| CVE-2022-3562 | 5.4 | Nov 20 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0 Affected: before 22.10.0 |
| CVE-2022-3231 | 5.4 | Sep 17 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0 Affected: before 22.9.0 |
| CVE-2022-0589 | 5.4 | Feb 15 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0 Affected: before 22.1.0 |
| CVE-2022-0575 | 5.4 | Feb 14 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0 Affected: before 22.2.0 |
| CVE-2021-31274 | 5.4 | Sep 8 | In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable Affected: before 21.3.0 |
| CVE-2019-15230 | 5.4 | Aug 28 | LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console Affected: 1.54 |
| CVE-2019-10667 | 5.3 | Sep 9 | An issue was discovered in LibreNMS through 1.47 Affected: through 1.47 |
| CVE-2020-15875 | 5.0 | Sep 13 | An issue was discovered in LibreNMS 1.65 Affected: before 1.65.1 |
| CVE-2026-84188 | 4.8 | Sep 1 | librenms before 26.7.0 Stored XSS via graph_descr settings Affected: before 26.7.0 |
| CVE-2026-2728 | 4.8 | Apr 13 | LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page Affected: before 26.3.0 |
| CVE-2026-26992 | 4.8 | Feb 20 | LibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups name Affected: < 26.2.0 |
| CVE-2026-26991 | 4.8 | Feb 20 | LibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups name Affected: < 26.2.0 |
| CVE-2026-26989 | 4.8 | Feb 20 | LibreNMS has Stored XSS in Alert Rule Affected: < 26.2.0 |
| CVE-2025-62412 | 4.8 | Oct 16 | LibreNMS alert-rules Cross-Site Scripting Vulnerability Affected: < 25.10.0 |
| CVE-2025-62411 | 4.8 | Oct 16 | Stored XSS in Alert Transport name field in LibreNMS Affected: < 25.10.0 |
| CVE-2024-50355 | 4.8 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.10.0 |
| CVE-2024-49758 | 4.8 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.10.0 |
| CVE-2024-47528 | 4.8 | Oct 1 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.9.0 |
| CVE-2024-47524 | 4.8 | Oct 1 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.9.0 |
| CVE-2022-4069 | 4.8 | Nov 20 | Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0 Affected: before 22.10.0 |
| CVE-2022-0772 | 4.8 | Feb 27 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2 Affected: before 22.2.2 |
| CVE-2026-109356 | 4.3 | Oct 12 | LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController Affected: before 26.9.0 |
| CVE-2026-109354 | 4.3 | Oct 12 | LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter Affected: before 26.9.0 |
| CVE-2026-108715 | 4.3 | Oct 11 | LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php Affected: through 26.9.1.1 |
| CVE-2023-48294 | 4.3 | Nov 17 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems Affected: before 23.11.0 |