Known Vulnerabilities for products from Librenms
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Librenms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109357 json | Not Provided | 2026-10-12 | 2026-10-15 | |
| CVE-2026-109356 json | Not Provided | 2026-10-12 | 2026-10-12 | |
| CVE-2026-109355 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-109354 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-109353 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-109352 json | Not Provided | 2026-10-12 | 2026-10-15 | |
| CVE-2026-108715 json | Not Provided | 2026-10-11 | 2026-10-13 | |
| CVE-2026-86427 json | LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated at... | Not Provided | 2026-09-07 | 2026-09-18 |
| CVE-2026-86426 json | LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers ... | Not Provided | 2026-09-07 | 2026-09-18 |
| CVE-2026-84194 json | Not Provided | 2026-09-01 | 2026-09-04 | |
| CVE-2026-6204 json | LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary L... | Not Provided | 2026-04-13 | 2026-04-22 |
| CVE-2026-2728 json | LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. S... | Not Provided | 2026-04-13 | 2026-04-22 |
| CVE-2025-68614 json | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is... | Not Provided | 2025-12-23 | 2026-10-19 |
| CVE-2025-65093 json | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind... | Not Provided | 2025-11-18 | 2026-10-19 |
| CVE-2025-65014 json | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password polic... | Not Provided | 2025-11-18 | 2026-10-19 |
| CVE-2025-65013 json | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a reflected cross-sit... | Not Provided | 2025-11-18 | 2026-10-19 |
| CVE-2025-62412 json | LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page i... | Not Provided | 2025-10-16 | 2026-10-19 |
| CVE-2025-62411 json | LibreNMS is a community-based GPL-licensed network monitoring system. LibreNMS <= 25.8.0 contains a Stored Cross-Site Script... | Not Provided | 2025-10-16 | 2026-10-19 |
| CVE-2025-62365 json | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in `rep... | Not Provided | 2025-10-13 | 2026-10-19 |
| CVE-2024-51092 json | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController... | Not Provided | 2026-05-08 | 2026-05-12 |
Known software with vulnerabilities from Librenms
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Librenms | Librenms | 0.1 |