Skip to content
OpenAdvisories

Package · Packagist

librenms/librenms

106 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-51092 Public exploit

    LibreNMS has an Authenticated OS Command Injection

    LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's initRrdDirectory().

    librenms/librenms Packagist
  • Critical 9.3
    CVE-2026-26988 Public exploit

    LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

    LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below contain an SQL Injection vulnerability in the ajax_table.php endpoint. The application fails to properly sanitize or parameterize user input when processi…

    librenms librenms librenms/librenms Packagist
  • Medium 6.5
    CVE-2020-15873 Public exploit

    LibreNMS SQL Injection vulnerability

    In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.

    librenms/librenms Packagist
  • Critical 9.8
    CVE-2018-20434 Public exploit EPSS 71%

    LibreNMS arbitrary OS commands execution

    LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=l…

    librenms/librenms Packagist