L
LibreNMS
Security Risk Profile
56
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 118 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 9, 2017 to present
118
Total CVEs
63
Critical+High
0
Exploited
20
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
20
Critical/High
Risk Level
56/100
medium
🆕 7Fresh (<7d)📈 11 in Last 30 Days
Severity Distribution
Critical
13High
50Medium
51Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
22Age Distribution
Common Weaknesses (CWE)
1
XSS
72
2
SQL Injection
18
3
CSRF
9
4
Command Injection
6
5
OS Command Injection
6
Most Affected Products
1. librenms librenms127
2. composer/librenms/librenms74
Recent Vulnerabilities
See more →CVE-2026-86427
CVSS 8.7high
LibreNMS before 26.8.0 Argument Injection via graph_title
Sep 7, 2026🔧 No Patch
CVE-2026-86426
CVSS 9.2critical
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
Sep 7, 2026🔧 No Patch
CVE-2026-84194
CVSS 8.6high
LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
Sep 1, 2026🔧 No Patch
CVE-2026-84192
CVSS 7.1high
LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data
Sep 1, 2026🔧 No Patch
CVE-2026-84191
CVSS 5.3medium
LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields
Sep 1, 2026🔧 No Patch
CVE-2026-84189
CVSS 9.2critical
LibreNMS before 26.7.0 Stored XSS via Oxidized API
Sep 1, 2026🔧 No Patch
CVE-2026-84188
CVSS 4.8medium
librenms before 26.7.0 Stored XSS via graph_descr settings
Sep 1, 2026🔧 No Patch
CVE-2026-80214
CVSS 8.6high
LibreNMS Virtualisation Discovery Module RCE
Aug 26, 2026🔧 No Patch
CVE-2020-15878
CVSS 8.8high
Aug 26, 2026🔧 No Patch
CVE-2020-15874
CVSS 8.8high
Aug 26, 2026🔧 No Patch
Monitor LibreNMS in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.