Skip to content
OpenAdvisories

Product · netbox-community

netbox

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-104073

    NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

    NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpReques…

    netbox-community netbox
  • High 8.8
    CVE-2026-29514

    NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin

    NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated users with exporttemplate or configtemplate permissions to execute arbitrary code by specify…

    netbox-community netbox