Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how librenms compares to other vendors in security performance

View Risk Score →

librenms librenmsPath Traversal

Risk 38
Severity
6.5
First published (updated )
CVE-2026-30480

librenms librenmsOS Command Injection

Risk 42
Severity
8.5
EPSS
0.01%
First published (updated )
CVE-2026-6204

librenms librenmsXSS

Risk 29
Severity
4.6
First published (updated )
CVE-2026-2728

composer/librenms/librenmsLibreNMS has Time-Based Blind SQL Injection in address-search.inc.php

Risk 56
Severity
8.8
EPSS
0.01%
First published (updated )
CVE-2026-26990

composer/librenms/librenmsLibreNMS has Stored XSS in Alert Rule

Risk 22
Severity
4.8
EPSS
0.00%
First published (updated )
CVE-2026-26989
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/librenms/librenmsLibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

Risk 47
Severity
9.3
EPSS
0.00%
First published (updated )
CVE-2026-26988

composer/librenms/librenmsLibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()

Risk 25
Severity
5.4
EPSS
0.01%
First published (updated )
CVE-2026-27016

composer/librenms/librenmsLibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups name

Risk 23
Severity
5.1
EPSS
0.01%
First published (updated )
CVE-2026-26992

composer/librenms/librenmsLibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups name

Risk 23
Severity
5.1
EPSS
0.01%
First published (updated )
CVE-2026-26991

composer/librenms/librenmsLibreNMS affected by reflected XSS via email field

Risk 27
Severity
6.1
EPSS
0.00%
First published (updated )
CVE-2026-26987
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

librenms librenmsLibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection

Risk 49
Severity
7.1
First published (updated )
CVE-2020-36947

librenms librenmsLibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Risk 31
First published (updated )
Advisory
ZDI-25-1182

librenms librenmsZDI-25-1182: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Risk 37
First published (updated )
ZDI-CAN-28575

librenms librenmsLibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2025-68614

composer/librenms/librenmsLibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint

Risk 39
Severity
5.5
First published (updated )
CVE-2025-65093
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/librenms/librenmsLibreNMS has Weak Password Policy

Risk 20
Severity
3.7
First published (updated )
CVE-2025-65014

composer/librenms/librenmsLibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`

Risk 33
Severity
6.2
First published (updated )
CVE-2025-65013

librenms librenmsLibreNMS alert-rules Cross-Site Scripting Vulnerability

Risk 29
Severity
4.8
First published (updated )
CVE-2025-62412

composer/librenms/librenmsStored XSS in Alert Transport name field in LibreNMS

Risk 33
Severity
5.5
First published (updated )
CVE-2025-62411

librenms librenmsLibreNMS vulnerable to Reflected-XSS in `report_this` function

Risk 38
Severity
6.1
First published (updated )
CVE-2025-62365
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

librenms librenmsLibreNMS allows stored XSS in Alert Template name field

Risk 33
Severity
5.5
First published (updated )
CVE-2025-55296

composer/librenms/librenmsLibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE

Risk 70
Severity
7.5
First published (updated )
CVE-2025-54138

librenms librenmsLibreNMS stored Cross-site Scripting vulnerability in poller group name

Risk 27
Severity
6.1
EPSS
0.00%
First published (updated )
CVE-2025-47931

librenms librenmsReflected Cross-site Scripting on error alert in librenms

Risk 27
Severity
6.1
EPSS
0.04%
First published (updated )
CVE-2025-23201

composer/librenms/librenmsStored XSS-LibreNMS-Misc Section in librenms

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2025-23200
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/librenms/librenmsStored XSS-LibreNMS-Ports in librenms

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2025-23199

librenms librenmsStored-XSS-LibreNMS-Display-Name in librenms

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2025-23198

librenms librenmsStored XSS-LibreNMS-Display Name 2 in librenms

Risk 34
Severity
5.4
First published (updated )
CVE-2024-56144

composer/librenms/librenmsXSS

Risk 35
Severity
5.4
First published (updated )
CVE-2024-53457

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php

Risk 55
Severity
7.5
First published (updated )
CVE-2024-52526
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203