LI
Product
librenms
124
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 9High 26Medium 87Low 2
Watch
Add librenms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0575 | 5.4 | Feb 14 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0 Affected: before 22.2.0 |
| CVE-2021-31274 | 5.4 | Sep 8 | In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable Affected: before 21.3.0 |
| CVE-2019-15230 | 5.4 | Aug 28 | LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console Affected: 1.54 |
| CVE-2019-10667 | 5.3 | Sep 9 | An issue was discovered in LibreNMS through 1.47 Affected: through 1.47 |
| CVE-2020-15875 | 5.0 | Sep 13 | An issue was discovered in LibreNMS 1.65 Affected: before 1.65.1 |
| CVE-2026-84188 | 4.8 | Sep 1 | librenms before 26.7.0 Stored XSS via graph_descr settings Affected: before 26.7.0 |
| CVE-2026-2728 | 4.8 | Apr 13 | LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page Affected: before 26.3.0 |
| CVE-2026-26992 | 4.8 | Feb 20 | LibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups name Affected: < 26.2.0 |
| CVE-2026-26991 | 4.8 | Feb 20 | LibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups name Affected: < 26.2.0 |
| CVE-2026-26989 | 4.8 | Feb 20 | LibreNMS has Stored XSS in Alert Rule Affected: < 26.2.0 |
| CVE-2025-62412 | 4.8 | Oct 16 | LibreNMS alert-rules Cross-Site Scripting Vulnerability Affected: < 25.10.0 |
| CVE-2025-62411 | 4.8 | Oct 16 | Stored XSS in Alert Transport name field in LibreNMS Affected: < 25.10.0 |
| CVE-2024-50355 | 4.8 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.10.0 |
| CVE-2024-49758 | 4.8 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.10.0 |
| CVE-2024-47528 | 4.8 | Oct 1 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.9.0 |
| CVE-2024-47524 | 4.8 | Oct 1 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.9.0 |
| CVE-2022-4069 | 4.8 | Nov 20 | Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0 Affected: before 22.10.0 |
| CVE-2022-0772 | 4.8 | Feb 27 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2 Affected: before 22.2.2 |
| CVE-2026-109356 | 4.3 | Oct 12 | LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController Affected: before 26.9.0 |
| CVE-2026-109354 | 4.3 | Oct 12 | LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter Affected: before 26.9.0 |
| CVE-2026-108715 | 4.3 | Oct 11 | LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php Affected: through 26.9.1.1 |
| CVE-2023-48294 | 4.3 | Nov 17 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems Affected: before 23.11.0 |
| CVE-2025-65014 | 3.7 | Nov 18 | LibreNMS has Weak Password Policy Affected: < 25.11.0 |
| CVE-2024-47526 | 2.4 | Oct 1 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.9.0 |