Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: librenms 26.9.0 Clear all filters
TI-2026-71173 CVE-2026-109357 · GHSA-rx4g-rhf6-xw5x

LDAP filter injection in LibreNMS allows authentication bypass

Priority HIGH 75

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00596 Published 2026-10-12 Fixed in 26.9.0 CWE-90
TI-2026-71172 CVE-2026-109356 · GHSA-h6hv-5g7p-j2pv

Missing authorization in LibreNMS port purge lets read-only users delete ports

Priority LOW 23

LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read users to physically delete ports without delete privileges.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-12 Fixed in 26.9.0 CWE-862
TI-2026-71171 CVE-2026-109355 · GHSA-m63v-9j9m-6j88

Stored XSS in LibreNMS Tools Oxidized node list

Priority LOW 23

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00188 Published 2026-10-12 Fixed in 26.9.0 CWE-79
TI-2026-71170 CVE-2026-109354 · GHSA-hr7h-8h3p-w7rx

Path traversal in LibreNMS lets users read unauthorized RRD data

Priority LOW 24

LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00275 Published 2026-10-12 Fixed in 26.9.0 CWE-22
TI-2026-71169 CVE-2026-109353 · GHSA-g9jw-2r94-hwjc

SQL injection in LibreNMS notifications lets users read password hashes

Priority MEDIUM 64

LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00294 Published 2026-10-12 Fixed in 26.9.0 CWE-89
TI-2026-71168 CVE-2026-109352 · GHSA-4f47-pwgv-rph4

Stored cross-site scripting in LibreNMS wireless sensor descriptions

Priority MEDIUM 57

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, populated from SNMP DisplayString fields durin…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0024 Published 2026-10-12 Fixed in 26.9.0 CWE-79