Login Request a demo
DE
Product
devicetype-library
by netbox-community · last CVE Oct 1, 2026
4
CVEs
0
On KEV
9.6
Max CVSS
1
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities4Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add devicetype-library to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54752
9.6
1%
Sep 17
NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request
Affected: < 1c6f7e2b93589b965318c6e67ac3504831f0e71e
CVE-2026-54916
8.8
1%
Sep 17
NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft
Affected: < b0d9a3dadd0a0a9d3c93b0b2777559fd4bad1037g
CVE-2026-55251
6.5
0%
Oct 1
NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files
Affected: < f41fc1e48dec8d7d31afba5f13a8c73652ff5796
CVE-2026-54918
5.3
0%
Sep 17
NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI
Affected: < 8980c690097e92f5028c7e6df402b327d827ecd5
Showing 4