LI
Product
librenms
124
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 9High 26Medium 87Low 2
Watch
Add librenms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86426 | 9.8 | Sep 7 | LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion Affected: before 26.8.0 |
| CVE-2022-4070 | 9.8 | Nov 20 | Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0 Affected: before 22.10.0 |
| CVE-2022-29712 | 9.8 | Jun 2 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters Affected: 22.3.0 |
| CVE-2021-44278 | 9.8 | Dec 3 | Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php Affected: 21.11.0 |
| CVE-2019-10665 | 9.8 | Sep 9 | An issue was discovered in LibreNMS through 1.47 Affected: through 1.47 |
| CVE-2018-20434 | 9.8 | Apr 24 | LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device,… Affected: 1.46 |
| CVE-2024-51092 | 9.1 | May 8 | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and… Affected: before 24.10.0 |
| CVE-2026-26988 | 9.1 | Feb 20 | LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream Affected: < 26.2.0 |
| CVE-2019-10668 | 9.1 | Sep 9 | An issue was discovered in LibreNMS through 1.47 Affected: through 1.47 |
Showing 9