Login Request a demo
LI
Product
librenms
by librenms · last CVE Oct 12, 2026
124
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities124In the news0Timeline
Severity mix
Critical 9High 26Medium 87Low 2
Severity
All severities124Critical9High26Medium87Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add librenms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-36947
6.5
0%
Jan 27
LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection
Affected: 1.46
CVE-2023-5591
6.5
24%
Oct 16
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0
Affected: through 23.9.1
CVE-2022-0588
6.5
1%
Feb 15
Missing Authorization in Packagist librenms/librenms prior to 22.2.0
Affected: before 22.2.0
CVE-2022-0587
6.5
1%
Feb 15
Improper Authorization in Packagist librenms/librenms prior to 22.2.0
Affected: before 22.2.0
CVE-2020-15873
6.5
2%
Jul 21
In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php
Affected: before 1.65.1
CVE-2026-109355
6.1
0%
Oct 12
LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List
Affected: before 26.9.0
CVE-2026-109352
6.1
0%
Oct 12
LibreNMS before 26.9.0 Stored XSS via wireless sensor description
Affected: before 26.9.0
CVE-2026-84191
6.1
0%
Sep 1
LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields
Affected: before 26.5.0
CVE-2026-26987
6.1
0%
Feb 20
LibreNMS affected by reflected XSS via email field
Affected: < 26.2.0
CVE-2025-65013
6.1
0%
Nov 18
LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`
Affected: < 25.11.0
CVE-2025-62365
6.1
0%
Oct 13
LibreNMS vulnerable to Reflected-XSS in `report_this` function
Affected: < 25.7.0
CVE-2025-47931
6.1
10%
May 17
LibreNMS is PHP/MySQL/SNMP based network monitoring software
Affected: before 25.5.0
CVE-2025-23201
6.1
0%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.11.0
CVE-2023-5060
6.1
1%
Sep 19
Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1
Affected: before 23.9.1
CVE-2023-4978
6.1
1%
Sep 15
Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0
Affected: before 23.9.0
CVE-2022-3561
6.1
1%
Nov 20
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0
Affected: before 22.10.0
CVE-2022-3516
6.1
0%
Nov 20
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0
Affected: before 22.10.0
CVE-2022-36746
6.1
1%
Aug 30
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php
Affected: 22.6.0
CVE-2022-36745
6.1
1%
Aug 30
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php
Affected: 22.6.0
CVE-2022-29711
6.1
1%
Jun 2
LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php
Affected: 22.3.0
CVE-2022-0576
6.1
1%
Feb 14
Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0
Affected: before 22.2.0
CVE-2021-44279
6.1
1%
Dec 1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php
Affected: 21.11.0
CVE-2021-44277
6.1
1%
Dec 1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php
Affected: 21.11.0
CVE-2021-43324
6.1
1%
Nov 3
LibreNMS through 21.10.2 allows XSS via a widget title
Affected: through 21.10.2
CVE-2019-10670
6.1
1%
Sep 9
An issue was discovered in LibreNMS through 1.47
Affected: through 1.47
CVE-2018-18478
6.1
2%
Oct 18
Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the…
Affected: before 1.44
CVE-2017-16759
5.9
2%
Nov 9
The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php
Affected: through 1.30
CVE-2026-84193
5.8
0%
Sep 1
LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
Affected: through 26.2.0
CVE-2025-65093
5.5
4%
Nov 18
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Affected: < 25.11.0
CVE-2026-45694
5.4
0%
Aug 26
LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters
Affected: < 26.5.0
CVE-2026-27016
5.4
0%
Feb 20
LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()
Affected: >= 24.10.0, < 26.2.0
CVE-2025-68614
5.4
4%
Dec 22
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
Affected: < 25.12.0
CVE-2025-55296
5.4
15%
Aug 18
librenms is a community-based GPL-licensed network monitoring system
Affected: before 25.8.0
CVE-2025-23200
5.4
32%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.11.0
CVE-2025-23199
5.4
1%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.11.0
CVE-2025-23198
5.4
0%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.11.0
CVE-2024-56144
5.4
0%
Jan 16
librenms is a community-based GPL-licensed network monitoring system
Affected: before 24.12.0
CVE-2024-53457
5.4
46%
Dec 5
A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a…
Affected: 24.9.0 through 24.10.0
CVE-2024-52526
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: 24.10.0
CVE-2024-51497
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-51496
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-51495
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-51494
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-50352
5.4
41%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-50351
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-50350
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-49764
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-49759
5.4
0%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-49754
5.4
74%
Nov 15
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.10.0
CVE-2024-47527
5.4
1%
Oct 1
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
Affected: before 24.9.0
Page 1 of 2 · 87 total
12