Read the docs

librenms

Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

librenms records in CISA KEV

No librenms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Librenms 106 records HIGH

Records

124 records

TI-2018-14479 CVE-2018-20434 · GHSA-62q7-qj6g-gvr7

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the…

Priority HIGH 80

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=captu…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.71487 Published 2019-04-24 No fix listed CWE-78
TI-2026-71173 CVE-2026-109357 · GHSA-rx4g-rhf6-xw5x

LDAP filter injection in LibreNMS allows authentication bypass

Priority HIGH 75

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00596 Published 2026-10-12 Fixed in 26.9.0 CWE-90
TI-2026-59134 CVE-2026-86426 · GHSA-84cr-xjpw-q9mc

LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

Priority HIGH 75

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.04358 Published 2026-09-07 Fixed in 26.8.0 CWE-287
TI-2026-57885 CVE-2026-84189 · GHSA-r436-6p4j-frwf

LibreNMS before 26.7.0 Stored XSS via Oxidized API

Priority HIGH 75

LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable Oxidized integration URL (oxidized.url) into the device showconfig page without applying htmlspecia…

CVSS 4.0CRITICAL 9.2 Network High privileges User interaction EPSS 0.00382 Published 2026-09-01 Fixed in 26.7.0 CWE-79
TI-2022-03735 CVE-2022-4070 · GHSA-x93j-3hh3-6x23

Insufficient Session Expiration in librenms/librenms

Priority HIGH 75

Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00662 Published 2022-11-20 Fixed in 22.10.0 CWE-613
TI-2026-57886 CVE-2026-84190 · GHSA-p7jp-qp65-h4xf

LibreNMS before 26.5.0 Remote Code Execution via AboutController

Priority HIGH 73

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell_exec() without proper validation.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00863 Published 2026-09-01 Fixed in 26.5.0 CWE-77
TI-2022-03252 CVE-2022-3525 · GHSA-cv9g-h8mm-xx5h

Deserialization of Untrusted Data in librenms/librenms

Priority HIGH 73

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00951 Published 2022-11-20 Fixed in 22.10.0 CWE-502
TI-2026-57890 CVE-2026-84194 · GHSA-jjvr-265m-qmq9

LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

Priority HIGH 72

LibreNMS versions >= 23.10.0 and < 26.2.0 (fixed in 26.4.0) contain an authenticated OS command injection vulnerability in libvirt discovery.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01526 Published 2026-09-01 Fixed in 26.4.0 CWE-78
TI-2026-55455 CVE-2026-80214 · GHSA-gq95-24rp-w6h2

LibreNMS Virtualisation Discovery Module RCE

Priority HIGH 72

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00539 Published 2026-08-26 Fixed in 26.4.1 CWE-78
TI-2026-05445 CVE-2026-6204 · GHSA-pr3g-phhr-h8fh

OS command injection in librenms

Priority HIGH 72

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.07533 Published 2026-04-13 Fixed in 26.3.0 CWE-78
TI-2024-34235 CVE-2024-51092 · GHSA-x645-6pf9-xwxw

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command…

Priority HIGH 72

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's initRrdDirectory().

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.07176 Published 2026-05-08 Fixed in 24.10.0 CWE-78
TI-2023-25228 CVE-2023-46745 · GHSA-rq42-58qf-v3qx

Rate limiting Bypass on login page in libreNMS

Priority HIGH 72

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00599 Published 2023-11-17 Fixed in 23.11.0 CWE-307
TI-2022-03732 CVE-2022-4067 · GHSA-qch4-jmf8-xvp7

Cross-site Scripting (XSS) - Stored in librenms/librenms

Priority HIGH 68

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.93712 Published 2022-11-20 Fixed in 22.10.0 CWE-79
TI-2022-03278 CVE-2022-3562 · GHSA-5h77-4245-pg5p

Cross-site Scripting (XSS) - Stored in librenms/librenms

Priority HIGH 68

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.94216 Published 2022-11-20 Fixed in 22.10.0 CWE-79
TI-2022-03734 CVE-2022-4069 · GHSA-p55m-g4m3-qmrp

Cross-site Scripting (XSS) - Generic in librenms/librenms

Priority HIGH 66

Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.93343 Published 2022-11-20 Fixed in 22.10.0 CWE-79
TI-2026-71169 CVE-2026-109353 · GHSA-g9jw-2r94-hwjc

SQL injection in LibreNMS notifications lets users read password hashes

Priority MEDIUM 64

LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00294 Published 2026-10-12 Fixed in 26.9.0 CWE-89
TI-2026-57888 CVE-2026-84192 · GHSA-r97f-5q78-rq8c

LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data

Priority MEDIUM 64

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00331 Published 2026-09-01 Fixed in 26.3.1 CWE-79
Load more
Open these records in search →