Librenms vulnerabilities
95 CVEs and advisories name Librenms as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-68614LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
- CVE-2025-65093LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
- CVE-2025-65014LibreNMS has Weak Password Policy
- CVE-2025-65013LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`
- CVE-2025-62412LibreNMS alert-rules Cross-Site Scripting Vulnerability
- CVE-2025-62411Stored XSS in Alert Transport name field in LibreNMS
- CVE-2025-62365LibreNMS vulnerable to Reflected-XSS in `report_this` function
- CVE-2025-55296LibreNMS allows stored XSS in Alert Template name field
- CVE-2025-54138LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE
- CVE-2025-47931LibreNMS stored Cross-site Scripting vulnerability in poller group name
- CVE-2024-56144Stored XSS-LibreNMS-Display Name 2 in librenms
- CVE-2025-23198Stored-XSS-LibreNMS-Display-Name in librenms
- CVE-2025-23199Stored XSS-LibreNMS-Ports in librenms
- CVE-2025-23200Stored XSS-LibreNMS-Misc Section in librenms
- CVE-2025-23201Reflected Cross-site Scripting on error alert in librenms
- CVE-2024-52526LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php
- CVE-2024-51497LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php
- CVE-2024-51496LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php
- CVE-2024-51495LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php
- CVE-2024-51494LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
- CVE-2024-50355LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints
- CVE-2024-50352LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php
- CVE-2024-50351LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php
- CVE-2024-50350LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
- CVE-2024-49764LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php
- CVE-2024-49759LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
- CVE-2024-49758LibreNMS has a stored XSS in ExamplePlugin with Device's Notes
- CVE-2024-49754LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php
- CVE-2024-47523LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
- CVE-2024-47524LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name