LI
Vendor
librenms
1 product with CVEs on record
124
CVEs
0
On KEV
7
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109357
LI
librenms
librenms
8.1
1%
Oct 12LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
CVE-2026-109356
LI
librenms
librenms
4.3
0%
Oct 12LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController
CVE-2026-109355
LI
librenms
librenms
6.1
0%
Oct 12LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List
CVE-2026-109354
LI
librenms
librenms
4.3
0%
Oct 12LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
CVE-2026-109353
LI
librenms
librenms
7.1
0%
Oct 12LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
CVE-2026-109352
LI
librenms
librenms
6.1
0%
Oct 12LibreNMS before 26.9.0 Stored XSS via wireless sensor description
CVE-2026-108715
LI
librenms
librenms
4.3
0%
Oct 11LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
CVE-2020-15875
LI
LibreNMS
LibreNMS
5.0
0%
Sep 13An issue was discovered in LibreNMS 1.65
CVE-2026-86427
LI
librenms
librenms
8.8
1%
Sep 7LibreNMS before 26.8.0 Argument Injection via graph_title
CVE-2026-86426
LI
librenms
librenms
9.8
4%
Sep 7LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
CVE-2026-84194
LI
librenms
librenms
8.6
2%
Sep 1LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
CVE-2026-84193
LI
librenms
librenms
5.8
0%
Sep 1LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
CVE-2026-84192
LI
librenms
librenms
7.1
0%
Sep 1LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data
CVE-2026-84191
LI
librenms
librenms
6.1
0%
Sep 1LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields
CVE-2026-84190
LI
librenms
librenms
7.2
1%
Sep 1LibreNMS before 26.5.0 Remote Code Execution via AboutController
CVE-2026-84189
LI
librenms
librenms
8.1
0%
Sep 1LibreNMS before 26.7.0 Stored XSS via Oxidized API
CVE-2026-84188
LI
librenms
librenms
4.8
0%
Sep 1librenms before 26.7.0 Stored XSS via graph_descr settings
CVE-2026-55182
LI
librenms
librenms
8.6
2%
Aug 26LibreNMS: Remote Code Execution by Signal Alert Transportation Module
CVE-2026-45694
LI
librenms
librenms
5.4
0%
Aug 26LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters
CVE-2026-80214
LI
librenms
librenms
8.6
1%
Aug 26LibreNMS Virtualisation Discovery Module RCE
CVE-2024-51092
LI
Librenms
Librenms
9.1
7%
May 8LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and…
CVE-2026-6204
LI
librenms
librenms
7.2
8%
Apr 13LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature
CVE-2026-2728
LI
librenms
librenms
4.8
0%
Apr 13LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page
CVE-2026-26992
LI
librenms
librenms
4.8
0%
Feb 20LibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups name
CVE-2026-26991
LI
librenms
librenms
4.8
0%
Feb 20LibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups name
CVE-2026-27016
LI
librenms
librenms
5.4
0%
Feb 20LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()
CVE-2026-26990
LI
librenms
librenms
8.8
4%
Feb 20LibreNMS has Time-Based Blind SQL Injection in address-search.inc.php
CVE-2026-26989
LI
librenms
librenms
4.8
0%
Feb 20LibreNMS has Stored XSS in Alert Rule
CVE-2026-26988
LI
librenms
librenms
9.1
8%
Feb 20LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream
CVE-2026-26987
LI
librenms
librenms
6.1
0%
Feb 20LibreNMS affected by reflected XSS via email field
CVE-2020-36947
LI
LibreNMS
LibreNMS
6.5
0%
Jan 27LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection
CVE-2025-68614
LI
librenms
librenms
5.4
4%
Dec 22LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
CVE-2025-65093
LI
librenms
librenms
5.5
4%
Nov 18LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
CVE-2025-65014
LI
librenms
librenms
3.7
0%
Nov 18LibreNMS has Weak Password Policy
CVE-2025-65013
LI
librenms
librenms
6.1
0%
Nov 18LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`
CVE-2025-62412
LI
librenms
librenms
4.8
0%
Oct 16LibreNMS alert-rules Cross-Site Scripting Vulnerability
CVE-2025-62411
LI
librenms
librenms
4.8
13%
Oct 16Stored XSS in Alert Transport name field in LibreNMS
CVE-2025-62365
LI
librenms
librenms
6.1
0%
Oct 13LibreNMS vulnerable to Reflected-XSS in `report_this` function
CVE-2025-55296
LI
Librenms
Librenms
5.4
15%
Aug 18librenms is a community-based GPL-licensed network monitoring system
CVE-2025-54138
LI
Librenms
Librenms
7.5
1%
Jul 22LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems
CVE-2025-47931
LI
Librenms
Librenms
6.1
10%
May 17LibreNMS is PHP/MySQL/SNMP based network monitoring software
CVE-2025-23201
LI
Librenms
Librenms
6.1
0%
Jan 16librenms is a community-based GPL-licensed network monitoring system
CVE-2025-23200
LI
Librenms
Librenms
5.4
32%
Jan 16librenms is a community-based GPL-licensed network monitoring system
CVE-2025-23199
LI
Librenms
Librenms
5.4
1%
Jan 16librenms is a community-based GPL-licensed network monitoring system
CVE-2025-23198
LI
Librenms
Librenms
5.4
0%
Jan 16librenms is a community-based GPL-licensed network monitoring system
CVE-2024-56144
LI
Librenms
Librenms
5.4
0%
Jan 16librenms is a community-based GPL-licensed network monitoring system
CVE-2024-53457
LI
Librenms
Librenms
5.4
46%
Dec 5A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a…
CVE-2024-52526
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-51497
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-51496
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-51495
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-51494
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-50355
LI
Librenms
Librenms
4.8
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-50352
LI
Librenms
Librenms
5.4
41%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-50351
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-50350
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-49764
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-49759
LI
Librenms
Librenms
5.4
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-49758
LI
Librenms
Librenms
4.8
0%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system
CVE-2024-49754
LI
Librenms
Librenms
5.4
74%
Nov 15LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system