Login Request a demo
LI
Product
librenms
by librenms · last CVE Oct 12, 2026
124
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities124In the news0Timeline
Severity mix
Critical 9High 26Medium 87Low 2
Severity
All severities124Critical9High26Medium87Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add librenms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3516
6.1
0%
Nov 20
Cross-site Scripting (XSS) - Stored in librenms/librenms
Affected: before 22.10.0
CVE-2022-3561
6.1
1%
Nov 20
Cross-site Scripting (XSS) - Generic in librenms/librenms
Affected: before 22.10.0
CVE-2022-36746
6.1
1%
Aug 30
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php
Affected: 22.6.0
CVE-2022-36745
6.1
1%
Aug 30
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php
Affected: 22.6.0
CVE-2022-29711
6.1
1%
May 31
LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php
Affected: 22.3.0
CVE-2022-0576
6.1
1%
Feb 13
Cross-site Scripting (XSS) - Generic in librenms/librenms
Affected: before 22.2.0
CVE-2021-44277
6.1
1%
Dec 1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php
Affected: 21.11.0
CVE-2021-44279
6.1
1%
Dec 1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php
Affected: 21.11.0
CVE-2021-43324
6.1
1%
Nov 3
LibreNMS through 21.10.2 allows XSS via a widget title
Affected: through 21.10.2
CVE-2019-10670
6.1
1%
Sep 9
An issue was discovered in LibreNMS through 1.47
Affected: through 1.47
CVE-2018-18478
6.1
2%
Oct 18
Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the…
Affected: before 1.44
CVE-2017-16759
5.9
2%
Nov 9
The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php
Affected: through 1.30
CVE-2026-84193
5.8
0%
Sep 1
LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
Affected: through 26.2.0
CVE-2025-65093
5.5
4%
Nov 18
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Affected: < 25.11.0
CVE-2026-45694
5.4
0%
Aug 26
LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters
Affected: < 26.5.0
CVE-2026-27016
5.4
0%
Feb 20
LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()
Affected: >= 24.10.0, < 26.2.0
CVE-2025-68614
5.4
4%
Dec 22
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
Affected: < 25.12.0
CVE-2025-55296
5.4
17%
Aug 18
LibreNMS allows stored XSS in Alert Template name field
Affected: < 25.8.0
CVE-2024-56144
5.4
0%
Jan 16
Stored XSS-LibreNMS-Display Name 2 in librenms
Affected: < 24.12.0
CVE-2025-23198
5.4
0%
Jan 16
Stored-XSS-LibreNMS-Display-Name in librenms
Affected: < 24.11.0
CVE-2025-23199
5.4
1%
Jan 16
Stored XSS-LibreNMS-Ports in librenms
Affected: < 24.11.0
CVE-2025-23200
5.4
32%
Jan 16
Stored XSS-LibreNMS-Misc Section in librenms
Affected: < 24.11.0
CVE-2024-53457
5.4
46%
Dec 5
A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute arbitrary web scripts or HTML via a…
Affected: 24.9.0 through 24.10.0
CVE-2024-52526
5.4
0%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php
Affected: < 24.10.0
CVE-2024-51497
5.4
0%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php
Affected: < 24.10.0
CVE-2024-51496
5.4
0%
Nov 15
LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php
Affected: < 24.10.0
CVE-2024-51495
5.4
0%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php
Affected: < 24.10.0
CVE-2024-51494
5.4
0%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
Affected: < 24.10.0
CVE-2024-50352
5.4
41%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php
Affected: < 24.10.0
CVE-2024-50351
5.4
0%
Nov 15
LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php
Affected: < 24.10.0
CVE-2024-50350
5.4
0%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
Affected: < 24.10.0
CVE-2024-49764
5.4
0%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php
Affected: < 24.10.0
CVE-2024-49759
5.4
0%
Nov 15
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
Affected: < 24.10.0
CVE-2024-49754
5.4
74%
Nov 15
LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php
Affected: < 24.10.0
CVE-2024-47523
5.4
1%
Oct 1
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
Affected: < 24.9.0
CVE-2024-47525
5.4
30%
Oct 1
Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php
Affected: < 24.9.0
CVE-2024-47527
5.4
1%
Oct 1
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php
Affected: < 24.9.0
CVE-2024-32479
5.4
34%
Apr 22
LibreNMS's Improper Sanitization on Service template name leads to Stored XSS
Affected: < 24.4.0
CVE-2023-48295
5.4
1%
Nov 17
Cross-site Scripting at Device groups Deletion feature in LibreNMS
Affected: < 23.11.0
CVE-2023-4982
5.4
1%
Sep 15
Cross-site Scripting (XSS) - Stored in librenms/librenms
Affected: before 23.9.0
CVE-2023-4981
5.4
1%
Sep 15
Cross-site Scripting (XSS) - DOM in librenms/librenms
Affected: before 23.9.0
CVE-2023-4980
5.4
1%
Sep 15
Cross-site Scripting (XSS) - Generic in librenms/librenms
Affected: before 23.9.0
CVE-2023-4979
5.4
1%
Sep 15
Cross-site Scripting (XSS) - Reflected in librenms/librenms
Affected: before 23.9.0
CVE-2023-4977
5.4
1%
Sep 15
Code Injection in librenms/librenms
Affected: before 23.9.0
CVE-2023-4347
5.4
70%
Aug 15
Cross-site Scripting (XSS) - Reflected in librenms/librenms
Affected: before 23.8.0
CVE-2022-3562
5.4
94%
Nov 20
Cross-site Scripting (XSS) - Stored in librenms/librenms
Affected: before 22.10.0
CVE-2022-4068
5.4
38%
Nov 20
Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
Affected: before 22.10.0
CVE-2022-4067
5.4
94%
Nov 20
Cross-site Scripting (XSS) - Stored in librenms/librenms
Affected: before 22.10.0
CVE-2022-3231
5.4
1%
Sep 17
Cross-site Scripting (XSS) - Stored in librenms/librenms
Affected: before 22.9.0
CVE-2022-0589
5.4
1%
Feb 15
Cross-site Scripting (XSS) - Stored in librenms/librenms
Affected: before 22.1.0
Page 2 of 3 · 124 total
123