N
Netbox
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 51 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2020 to present
51
Total CVEs
11
Critical+High
0
Exploited
11
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
11
Critical/High
Risk Level
40/100
medium
🆕 1Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
1High
10Medium
40Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
45
2
Code Injection
3
Most Affected Products
1. netbox Netbox52
2. Netbox Project Netbox20
3. netbox NetBox Community4
4. NetBox Device Type Library1
5. pypi/netbox1
Recent Vulnerabilities
See more →CVE-2026-55251
CVSS 6.5medium
NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files
Oct 1, 2026🔧 No Patch
CVE-2026-86176
CVSS 5.3medium
NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs
Sep 5, 2026🔧 No Patch
CVE-2026-86175
CVSS 7.1high
NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs
Sep 5, 2026🔧 No Patch
CVE-2026-69117
CVSS 7.1high
NetBox 4.5.8 ORM Injection via WritableNestedSerializer
Aug 11, 2026🔧 No Patch
CVE-2026-29514
CVSS 8.7high
NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin
May 4, 2026🔧 No Patch
CVE-2025-57543
CVSS 6.1medium
Mar 16, 2026🔧 No Patch
CVE-2025-69848
CVSS 5.4medium
Feb 3, 2026🔧 No Patch
CVE-2024-56915
CVSS 6.5medium
Jun 26, 2025🔧 No Patch
CVE-2024-56918
CVSS 6.1medium
Jun 24, 2025🔧 No Patch
CVE-2024-56916
CVSS 6.1medium
Jun 24, 2025🔧 No Patch
Monitor Netbox in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.