Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

106 records

Vendor: librenms Component: Librenms Clear all filters
TI-2026-59135 CVE-2026-86427 · GHSA-j7jc-m6xg-rrcw

LibreNMS before 26.8.0 Argument Injection via graph_title

Priority MEDIUM 41

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00605 Published 2026-09-07 Fixed in 26.8.0 CWE-77
TI-2026-59134 CVE-2026-86426 · GHSA-84cr-xjpw-q9mc

LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

Priority HIGH 75

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.04358 Published 2026-09-07 Fixed in 26.8.0 CWE-287
TI-2024-34235 CVE-2024-51092 · GHSA-x645-6pf9-xwxw

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command…

Priority HIGH 72

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's initRrdDirectory().

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.07176 Published 2026-05-08 Fixed in 24.10.0 CWE-78
TI-2026-05445 CVE-2026-6204 · GHSA-pr3g-phhr-h8fh

OS command injection in librenms

Priority HIGH 72

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.07533 Published 2026-04-13 Fixed in 26.3.0 CWE-78
TI-2026-02335 CVE-2026-2728 · GHSA-5gm9-622f-qcg5

Cross-site scripting in librenms

Priority MEDIUM 54

LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page.

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00225 Published 2026-04-13 Fixed in 26.3.0 CWE-79
TI-2026-21468 CVE-2026-26989 · GHSA-6xmx-xr9p-58p7

LibreNMS has Stored XSS in Alert Rule

Priority LOW 22

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00275 Published 2026-02-20 Fixed in 26.2.0 CWE-79
TI-2026-21466 CVE-2026-26987 · GHSA-gqx7-99jw-6fpr

LibreNMS affected by reflected XSS via email field

Priority LOW 30

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00336 Published 2026-02-20 Fixed in 26.2.0 CWE-79
TI-2020-19082 CVE-2020-36947 · GHSA-qp2j-v5jg-hg68

LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection

Priority MEDIUM 64

LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00474 Published 2026-01-27 No fix listed CWE-89
TI-2025-40201 CVE-2025-65014 · GHSA-5mrf-j8v6-f45g

LibreNMS has Weak Password Policy

Priority MEDIUM 51

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00272 Published 2025-11-18 Fixed in 25.11.0 CWE-521
TI-2024-37137 CVE-2024-56144 · GHSA-2f4w-6mc7-4w78

Stored XSS-LibreNMS-Display Name 2 in librenms

Priority LOW 25

librenms is a community-based GPL-licensed network monitoring system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00396 Published 2025-01-16 Fixed in 24.12.0 CWE-79
TI-2025-16983 CVE-2025-23198 · GHSA-pm8j-3v64-92cq

Stored-XSS-LibreNMS-Display-Name in librenms

Priority MEDIUM 58

librenms is a community-based GPL-licensed network monitoring system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00372 Published 2025-01-16 Fixed in 24.11.0 CWE-79
Load more