Skip to content
OpenAdvisories

Vendor

librenms

95 known vulnerabilities.

Products

librenms 70 librenms/librenms 25
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-86426 Public exploit

    LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

    LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending…

    librenms librenms
  • Critical 9.3
    CVE-2026-26988 Public exploit

    LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

    LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below contain an SQL Injection vulnerability in the ajax_table.php endpoint. The application fails to properly sanitize or parameterize user input when processi…

    librenms librenms librenms/librenms Packagist