Vulnerabilities in LibreNMS
75 resultsCVE-2024-56144MEDIUMStored XSS-LibreNMS-Display Name 2 in librenmsEPSS 0.4%CVE-2025-23198MEDIUMStored-XSS-LibreNMS-Display-Name in librenmsEPSS 0.3%CVE-2024-49758MEDIUMLibreNMS has a stored XSS in ExamplePlugin with Device's NotesEPSS 0.3%CVE-2024-50355MEDIUMLibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple EndpointsEPSS 0.3%CVE-2026-26987MEDIUMLibreNMS affected by reflected XSS via email fieldEPSS 0.3%CVE-2025-47931LOWLibreNMS stored Cross-site Scripting vulnerability in poller group nameEPSS 0.3%CVE-2025-62412LOWLibreNMS alert-rules Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2026-26989MEDIUMLibreNMS has Stored XSS in Alert RuleEPSS 0.2%CVE-2026-27016MEDIUMLibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()EPSS 0.2%CVE-2025-62365MEDIUMLibreNMS vulnerable to Reflected-XSS in `report_this` functionEPSS 0.2%CVE-2026-2728MEDIUMLibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploEPSS 0.2%CVE-2025-65014LOWLibreNMS has Weak Password PolicyEPSS 0.2%CVE-2026-26992MEDIUMLibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups nameEPSS 0.2%CVE-2026-26991MEDIUMLibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups nameEPSS 0.2%CVE-2025-65013MEDIUMLibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`EPSS 0.2%