Skip to content
OpenAdvisories

Vendor

librenms

95 known vulnerabilities.

Products

librenms 70 librenms/librenms 25
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-65014

    LibreNMS has Weak Password Policy

    LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password policy vulnerability was identified in the user management functionality of the LibreNMS application. This vulnerability allows administrat…

    librenms librenms librenms/librenms Packagist
  • Low 3.8
    CVE-2025-62412

    LibreNMS alert-rules Cross-Site Scripting Vulnerability

    LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0.

    librenms librenms librenms/librenms Packagist
  • Low 2.1
    CVE-2025-47931 EPSS 10%

    LibreNMS stored Cross-site Scripting vulnerability in poller group name

    LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS v25.4.0 and prior suffers from a Stored Cross-Site Scripting (XSS) Vulnerability in the `group name` parameter of the `http://localhost/poller/groups` form. This vulnerability allows attac…

    librenms librenms librenms/librenms Packagist
  • Low 3.5
    CVE-2024-47526

    LibreNMS has a Self-XSS ('Cross-site Scripting') in librenms/includes/html/modal/alert_template.inc.php

    LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulnerability in the "Alert Templates" feature allows users to inject arbitrary JavaScript into the alert template's name. This script executes …

    librenms librenms librenms/librenms Packagist
  • Low 2.7
    CVE-2022-4070

    Insufficient Session Expiration in librenms/librenms

    Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.

    librenms librenms/librenms librenms/librenms Packagist
  • Low 3.4
    CVE-2022-4069 EPSS 93%

    Cross-site Scripting (XSS) - Generic in librenms/librenms

    Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

    librenms librenms/librenms librenms/librenms Packagist
  • Low 3.4
    CVE-2022-4067 EPSS 94%

    Cross-site Scripting (XSS) - Stored in librenms/librenms

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

    librenms librenms/librenms librenms/librenms Packagist