LI
Product
librenms
124
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 9High 26Medium 87Low 2
Watch
Add librenms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86427 | 8.8 | Sep 7 | LibreNMS before 26.8.0 Argument Injection via graph_title Affected: before 26.8.0 |
| CVE-2026-26990 | 8.8 | Feb 20 | LibreNMS has Time-Based Blind SQL Injection in address-search.inc.php Affected: < 26.2.0 |
| CVE-2024-32461 | 8.8 | Apr 22 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.4.0 |
| CVE-2022-3525 | 8.8 | Nov 20 | Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0 Affected: before 22.10.0 |
| CVE-2022-0580 | 8.8 | Feb 14 | Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0 Affected: before 22.2.0 |
| CVE-2020-35700 | 8.8 | Feb 8 | A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to… Affected: before 21.1.0 |
| CVE-2020-15877 | 8.8 | Jul 21 | An issue was discovered in LibreNMS before 1.65.1 Affected: before 1.65.1 |
| CVE-2019-12463 | 8.8 | Sep 9 | An issue was discovered in LibreNMS 1.50.1 Affected: 1.50.1 before 1.53 |
| CVE-2019-10671 | 8.8 | Sep 9 | An issue was discovered in LibreNMS through 1.47 Affected: through 1.47 |
| CVE-2018-20678 | 8.8 | Mar 28 | LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search Affected: through 1.47 |
| CVE-2026-84194 | 8.6 | Sep 1 | LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname Affected: 23.10.0 before 26.4.0 |
| CVE-2026-55182 | 8.6 | Aug 26 | LibreNMS: Remote Code Execution by Signal Alert Transportation Module Affected: >= 21.6.0, < 26.5.0 |
| CVE-2026-80214 | 8.6 | Aug 26 | LibreNMS Virtualisation Discovery Module RCE Affected: 23.10.0 before 26.4.1 |
| CVE-2026-109357 | 8.1 | Oct 12 | LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header Affected: before 26.9.0 |
| CVE-2026-84189 | 8.1 | Sep 1 | LibreNMS before 26.7.0 Stored XSS via Oxidized API Affected: before 26.7.0 |
| CVE-2019-12465 | 8.1 | Sep 9 | An issue was discovered in LibreNMS 1.50.1 Affected: before 1.53 |
| CVE-2019-10666 | 8.1 | Sep 9 | An issue was discovered in LibreNMS through 1.47 Affected: through 1.47 |
| CVE-2025-54138 | 7.5 | Jul 22 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems Affected: before 25.7.0 |
| CVE-2023-46745 | 7.5 | Nov 17 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems Affected: before 23.11.0 |
| CVE-2019-12464 | 7.5 | Sep 9 | An issue was discovered in LibreNMS 1.50.1 Affected: 1.50.1 |
| CVE-2026-84190 | 7.2 | Sep 1 | LibreNMS before 26.5.0 Remote Code Execution via AboutController Affected: before 26.5.0 |
| CVE-2026-6204 | 7.2 | Apr 13 | LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature Affected: before 26.3.0 |
| CVE-2024-32480 | 7.2 | Apr 22 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system Affected: before 24.4.0 |
| CVE-2019-10669 | 7.2 | Sep 9 | An issue was discovered in LibreNMS through 1.47 Affected: through 1.47 |
| CVE-2026-109353 | 7.1 | Oct 12 | LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php Affected: before 26.9.0 |
| CVE-2026-84192 | 7.1 | Sep 1 | LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data Affected: before 26.3.1 |
Showing 26