Security
فارسی
All products

librenms/librenms

Composer · Package
106 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extractionCVE-2024-32480 · GHSA-JH57-J3VQ-H438 librenms/librenms Composer High Fix reported
LibreNMS uses Improper Sanitization on Service template name leads to Stored XSSCVE-2024-32479 · GHSA-72M9-7C8X-PMMW librenms/librenms Composer High Fix reported
LibreNMS vulnerable to SQL injection time-based leads to database extractionCVE-2024-32461 · GHSA-CWX6-CX7X-4Q34 librenms/librenms Composer High Fix reported
LibreNMS vulnerable to rate limiting bypass on login pageCVE-2023-46745 · GHSA-RQ42-58QF-V3QX librenms/librenms Composer Medium Fix reported
LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy TemplatesCVE-2026-84192 · GHSA-7W8C-QGXG-M7JX librenms/librenms Composer High Fix reported
LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig pageCVE-2026-84189 · GHSA-7GWW-X7FH-JF9J librenms/librenms Composer High Fix reported
LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated usersCVE-2026-84188 · GHSA-7CJ5-V4PP-V632 librenms/librenms Composer Medium Fix reported
LibreNMS Vulnerable to Remote Code Execution via AboutControllerCVE-2026-84190 · GHSA-JF24-8G2H-2WG7 librenms/librenms Composer Medium Fix reported
LibreNMS Vulnerable to Remote Code Execution by Signal Alert Transportation moduleCVE-2026-55182 · GHSA-C9FV-CGMM-2WG7 librenms/librenms Composer High Fix reported
LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignmentCVE-2026-45694 · GHSA-JMQM-F8Q4-V7WX librenms/librenms Composer Medium Fix reported
LibreNMS: Cross-Site Scripting in ShowConfigControllerCVE-2026-2728 · GHSA-5GM9-622F-QCG5 librenms/librenms Composer Low Fix reported
LibreNMS has an Authenticated OS Command InjectionCVE-2024-51092 · GHSA-X645-6PF9-XWXW librenms/librenms Composer Critical Fix reported
LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File WriteCVE-2026-6204 · GHSA-PR3G-PHHR-H8FH librenms/librenms Composer High Fix reported
LibreNMS Information DisclosureCVE-2019-10665 · GHSA-Q5RG-WG7H-73M5 librenms/librenms Composer Critical No fix reported
Missing Authorization in librenms/librenmsCVE-2022-0588 · GHSA-254Q-RQMW-VX45 librenms/librenms Composer Medium Fix reported
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.CVE-2026-26988 · GHSA-H3RV-Q4RQ-PQCV librenms/librenms Composer High Fix reported
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.phpCVE-2026-26990 · GHSA-79Q9-WC6P-CF92 librenms/librenms Composer High Fix reported
LibreNMS /device-groups name Stored Cross-Site ScriptingCVE-2026-26991 · GHSA-5PQF-54QP-32WX librenms/librenms Composer Medium Fix reported
LibreNMS has a Stored XSS in Alert RuleCVE-2026-26989 · GHSA-6XMX-XR9P-58P7 librenms/librenms Composer Medium Fix reported
LibreNMS affected by reflected xss via email field CVE-2026-26987 · GHSA-GQX7-99JW-6FPR librenms/librenms Composer Medium Fix reported