Advisories · Technology
librenms.
Every CVE that names librenms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
- librenms
- Other injection
- CVSS 5.3 Medium
LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController
- librenms
- Broken access control
- CVSS 5.3 Medium
LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List
- librenms
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
- librenms
- Path traversal
- CVSS 7.1 High
LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
- librenms
- SQL injection
- CVSS 5.3 Medium
LibreNMS before 26.9.0 Stored XSS via wireless sensor description
- librenms
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
- librenms
- Broken access control
- CVSS 5.0 Medium
SQL injection in LibreNMS
- LibreNMS
- SQL injection
- CVSS 8.7 High
LibreNMS before 26.8.0 Argument Injection via graph_title
- librenms
- Command injection
- CVSS 9.2 CriticalCritical · CVSS 9+
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
- librenms
- Authentication bypass
- CVSS 8.6 High
LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
- librenms
- Command injection
- CVSS 5.8 Medium
LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
- librenms
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields
- librenms
- Cross-site scripting (XSS)
- CVSS 8.6 High
LibreNMS Virtualisation Discovery Module RCE
- librenms
- Command injection