LI
Vendor
librenms
124
CVEs
0
On KEV
7
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109357 | LI librenms librenms | 8.1 | Oct 12 | LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header |
| CVE-2026-109356 | LI librenms librenms | 4.3 | Oct 12 | LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController |
| CVE-2026-109355 | LI librenms librenms | 6.1 | Oct 12 | LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List |
| CVE-2026-109354 | LI librenms librenms | 4.3 | Oct 12 | LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter |
| CVE-2026-109353 | LI librenms librenms | 7.1 | Oct 12 | LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php |
| CVE-2026-109352 | LI librenms librenms | 6.1 | Oct 12 | LibreNMS before 26.9.0 Stored XSS via wireless sensor description |
| CVE-2026-108715 | LI librenms librenms | 4.3 | Oct 11 | LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php |
| CVE-2020-15875 | LI LibreNMS LibreNMS | 5.0 | Sep 13 | An issue was discovered in LibreNMS 1.65 |
| CVE-2026-86427 | LI librenms librenms | 8.8 | Sep 7 | LibreNMS before 26.8.0 Argument Injection via graph_title |
| CVE-2026-86426 | LI librenms librenms | 9.8 | Sep 7 | LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion |
| CVE-2026-84194 | LI librenms librenms | 8.6 | Sep 1 | LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname |
| CVE-2026-84193 | LI librenms librenms | 5.8 | Sep 1 | LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP |
| CVE-2026-84192 | LI librenms librenms | 7.1 | Sep 1 | LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data |
| CVE-2026-84191 | LI librenms librenms | 6.1 | Sep 1 | LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields |
| CVE-2026-84190 | LI librenms librenms | 7.2 | Sep 1 | LibreNMS before 26.5.0 Remote Code Execution via AboutController |
| CVE-2026-84189 | LI librenms librenms | 8.1 | Sep 1 | LibreNMS before 26.7.0 Stored XSS via Oxidized API |
| CVE-2026-84188 | LI librenms librenms | 4.8 | Sep 1 | librenms before 26.7.0 Stored XSS via graph_descr settings |
| CVE-2026-55182 | LI librenms librenms | 8.6 | Aug 26 | LibreNMS: Remote Code Execution by Signal Alert Transportation Module |
| CVE-2026-45694 | LI librenms librenms | 5.4 | Aug 26 | LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters |
| CVE-2026-80214 | LI librenms librenms | 8.6 | Aug 26 | LibreNMS Virtualisation Discovery Module RCE |
| CVE-2024-51092 | LI Librenms Librenms | 9.1 | May 8 | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and… |
| CVE-2026-6204 | LI librenms librenms | 7.2 | Apr 13 | LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature |
| CVE-2026-2728 | LI librenms librenms | 4.8 | Apr 13 | LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page |
| CVE-2026-26992 | LI librenms librenms | 4.8 | Feb 20 | LibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups name |
| CVE-2026-26991 | LI librenms librenms | 4.8 | Feb 20 | LibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups name |
| CVE-2026-27016 | LI librenms librenms | 5.4 | Feb 20 | LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags() |
| CVE-2026-26990 | LI librenms librenms | 8.8 | Feb 20 | LibreNMS has Time-Based Blind SQL Injection in address-search.inc.php |
| CVE-2026-26989 | LI librenms librenms | 4.8 | Feb 20 | LibreNMS has Stored XSS in Alert Rule |
| CVE-2026-26988 | LI librenms librenms | 9.1 | Feb 20 | LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream |
| CVE-2026-26987 | LI librenms librenms | 6.1 | Feb 20 | LibreNMS affected by reflected XSS via email field |
| CVE-2020-36947 | LI LibreNMS LibreNMS | 6.5 | Jan 27 | LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection |
| CVE-2025-68614 | LI librenms librenms | 5.4 | Dec 22 | LibreNMS Alert Rule API Cross-Site Scripting Vulnerability |
| CVE-2025-65093 | LI librenms librenms | 5.5 | Nov 18 | LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint |
| CVE-2025-65014 | LI librenms librenms | 3.7 | Nov 18 | LibreNMS has Weak Password Policy |
| CVE-2025-65013 | LI librenms librenms | 6.1 | Nov 18 | LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name` |
| CVE-2025-62412 | LI librenms librenms | 4.8 | Oct 16 | LibreNMS alert-rules Cross-Site Scripting Vulnerability |
| CVE-2025-62411 | LI librenms librenms | 4.8 | Oct 16 | Stored XSS in Alert Transport name field in LibreNMS |
| CVE-2025-62365 | LI librenms librenms | 6.1 | Oct 13 | LibreNMS vulnerable to Reflected-XSS in `report_this` function |
| CVE-2025-55296 | LI Librenms Librenms | 5.4 | Aug 18 | librenms is a community-based GPL-licensed network monitoring system |
| CVE-2025-54138 | LI Librenms Librenms | 7.5 | Jul 22 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems |
| CVE-2025-47931 | LI Librenms Librenms | 6.1 | May 17 | LibreNMS is PHP/MySQL/SNMP based network monitoring software |
| CVE-2025-23201 | LI Librenms Librenms | 6.1 | Jan 16 | librenms is a community-based GPL-licensed network monitoring system |
| CVE-2025-23200 | LI Librenms Librenms | 5.4 | Jan 16 | librenms is a community-based GPL-licensed network monitoring system |
| CVE-2025-23199 | LI Librenms Librenms | 5.4 | Jan 16 | librenms is a community-based GPL-licensed network monitoring system |
| CVE-2025-23198 | LI Librenms Librenms | 5.4 | Jan 16 | librenms is a community-based GPL-licensed network monitoring system |
| CVE-2024-56144 | LI Librenms Librenms | 5.4 | Jan 16 | librenms is a community-based GPL-licensed network monitoring system |
| CVE-2024-53457 | LI Librenms Librenms | 5.4 | Dec 5 | A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a… |
| CVE-2024-52526 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-51497 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-51496 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-51495 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-51494 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-50355 | LI Librenms Librenms | 4.8 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-50352 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-50351 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-50350 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-49764 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-49759 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-49758 | LI Librenms Librenms | 4.8 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
| CVE-2024-49754 | LI Librenms Librenms | 5.4 | Nov 15 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system |
