Skip to content
OpenAdvisories

Vendor

librenms

95 known vulnerabilities.

Products

librenms 70 librenms/librenms 25
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-86426 Public exploit Scanner template

    LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

    LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending…

    librenms librenms
  • Critical 9.3
    CVE-2026-26988 Public exploit

    LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

    LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below contain an SQL Injection vulnerability in the ajax_table.php endpoint. The application fails to properly sanitize or parameterize user input when processi…

    librenms librenms librenms/librenms Packagist
  • Critical 9.8
    CVE-2023-4982

    Cross-site Scripting (XSS) - Stored in librenms/librenms

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 23.9.0.

    librenms librenms/librenms librenms/librenms Packagist
  • Critical 9.0
    CVE-2023-4978

    Cross-site Scripting (XSS) - DOM in librenms/librenms

    Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0.

    librenms librenms/librenms librenms/librenms Packagist
  • Critical 9.0
    CVE-2022-3525

    Deserialization of Untrusted Data in librenms/librenms

    Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.

    librenms librenms/librenms librenms/librenms Packagist