Known vulnerabilities in LibreNMS - page 2

Vendor: LibreNMS Project
Software: LibreNMS
Software CPE: cpe:2.3:a:librenms_project:librenms:*:*:*:*:*:*:*:*
Website: https://github.com/librenms
Total vulnerabilities: 71
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting LibreNMS LibreNMS is affected by 71 known vulnerabilities: 4 high, 12 medium, 55 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127438 - Weak Password Requirements
CVE-2025-65014		 CWE-521 Low
No
No
 25.11.0 24.04.2026 SB2026042412
#VU127437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-65013		 CWE-79 Low
No
No
 25.11.0 24.04.2026 SB2026042412
#VU127436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-65093		 CWE-89 Low
No
No
 25.11.0 24.04.2026 SB2026042412
#VU123080 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26992		 CWE-79 Low
Available
No
 26.2.0 19.02.2026 SB2026021933
#VU123079 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26991		 CWE-79 Low
Available
No
 26.2.0 19.02.2026 SB2026021933
#VU123078 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27016		 CWE-79 Low
Available
No
 26.2.0 19.02.2026 SB2026021933
#VU123077 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-26990		 CWE-89 Medium
Available
No
 26.1.0 19.02.2026 SB2026021934
#VU123076 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26989		 CWE-79 Low
Available
No
 26.2.0 19.02.2026 SB2026021933
#VU123075 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-26988		 CWE-89 High
Available
No
 26.1.0 19.02.2026 SB2026021934
#VU123074 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26987		 CWE-79 Low
Available
No
 26.2.0 19.02.2026 SB2026021933
#VU120609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68614		 CWE-79 Low
No
No
 25.12.0 26.12.2025 SB20251226351
#VU127450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23201		 CWE-79 Medium
No
No
 24.11.0 16.01.2025 SB2025011677
#VU127449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23200		 CWE-79 Low
No
No
 24.11.0 16.01.2025 SB2025011677
#VU127448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23199		 CWE-79 Low
No
No
 24.11.0 16.01.2025 SB2025011677
#VU127447 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23198		 CWE-79 Low
No
No
 24.11.0 16.01.2025 SB2025011677
#VU127446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-56144		 CWE-79 Low
No
No
 24.12.0 16.01.2025 SB2025011676
#VU129729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-49764		 CWE-79 Low
No
No
 24.10.0 15.11.2024 SB20241115152
#VU129728 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-51494		 CWE-79 Low
No
No
 24.10.0 15.11.2024 SB20241115152
#VU129727 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-50350		 CWE-79 Low
No
No
 24.10.0 15.11.2024 SB20241115152
#VU129726 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-51495		 CWE-79 Low
No
No
 24.10.0 15.11.2024 SB20241115152


Showing elements 21 - 40 out of 71