CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,501 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,501
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product librenms:librenms. Show all products

38 CVEs, showing 1 to 38
CVESeverityTitlePublished
CVE-2026-109357High 8.1LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109356Medium 4.3LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109355Medium 6.1LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109354Medium 4.3LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109353High 7.1LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109352Medium 6.1LibreNMS before 26.9.0 Stored XSS via wireless sensor description
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-108715Medium 4.3LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
Assigned by VulnCheck
Oct 11, 2026
CVE-2020-15875Medium 5.0An issue was discovered in LibreNMS 1.65.
Assigned by mitre
Sep 13, 2026
CVE-2026-86427High 8.8LibreNMS before 26.8.0 Argument Injection via graph_title
Assigned by VulnCheck
Sep 7, 2026
CVE-2026-86426Critical 9.2LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
Assigned by VulnCheck
Sep 7, 2026
CVE-2026-84194High 8.6LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84193Medium 5.8LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84192High 7.1LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84191Medium 6.1LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84190High 7.2LibreNMS before 26.5.0 Remote Code Execution via AboutController
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84189High 8.1LibreNMS before 26.7.0 Stored XSS via Oxidized API
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84188Medium 4.8librenms before 26.7.0 Stored XSS via graph_descr settings
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-55182High 8.6LibreNMS: Remote Code Execution by Signal Alert Transportation Module
Assigned by GitHub_M
Aug 26, 2026
CVE-2026-45694Medium 5.4LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters
Assigned by GitHub_M
Aug 26, 2026
CVE-2026-80214High 8.6LibreNMS Virtualisation Discovery Module RCE
Assigned by PRJBLK
Aug 26, 2026
CVE-2024-51092Critical 9.1LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's in…May 8, 2026
CVE-2026-6204High 7.2LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.Apr 13, 2026
CVE-2026-2728Medium 4.8LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page.Apr 13, 2026
CVE-2026-26992Medium 4.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
CVE-2026-26991Medium 4.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
CVE-2026-27016Medium 5.4LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
CVE-2026-26990High 8.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
CVE-2026-26989Medium 4.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
CVE-2026-26988Critical 9.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
CVE-2026-26987Medium 6.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
CVE-2020-36947High 7.1LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection
Assigned by VulnCheck
Jan 27, 2026
CVE-2025-68614Medium 5.4LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Dec 23, 2025
CVE-2025-65093Medium 5.5LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Nov 18, 2025
CVE-2025-65014Low 3.7LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Nov 18, 2025
CVE-2025-65013Medium 6.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Nov 18, 2025
CVE-2025-62412Medium 4.8LibreNMS is a community-based GPL-licensed network monitoring system.Oct 16, 2025
CVE-2025-62411Medium 4.8LibreNMS is a community-based GPL-licensed network monitoring system.Oct 16, 2025
CVE-2025-62365Medium 6.1LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system.Oct 13, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.