Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,644All CVEsplus 19,141 rejected
- 674Last 24 hours2,957 in the last 7 days
- 17,129Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 10 | 16 | 0 | 0 | 30 | 95 |
| 2025 | 0 | 1 | 11 | 3 | 0 | 15 | 65 |
| 2024 | 0 | 8 | 13 | 1 | 0 | 22 | 50 |
| 2023 | 2 | 7 | 3 | 0 | 0 | 12 | 28 |
| 2022 | 1 | 4 | 8 | 3 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-109357 | LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Headerlibrenms · librenms | Critical9.2 |
| CVE-2026-109356 | LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsControllerlibrenms · librenms | Medium5.3 |
| CVE-2026-109355 | LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node Listlibrenms · librenms | Medium5.3 |
| CVE-2026-109354 | LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameterlibrenms · librenms | Medium5.3 |
| CVE-2026-109353 | LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.phplibrenms · librenms | High7.1 |
| CVE-2026-109352 | LibreNMS before 26.9.0 Stored XSS via wireless sensor descriptionlibrenms · librenms | Medium5.3 |
| CVE-2026-108715 | LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.phplibrenms · librenms | Medium5.3 |
| CVE-2020-15875 | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via…LibreNMS · LibreNMS | Medium5.0 |
| CVE-2026-86427 | LibreNMS before 26.8.0 Argument Injection via graph_titlelibrenms · librenms | High8.7 |
| CVE-2026-86426 | LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusionlibrenms · librenms | Critical9.2 |
| CVE-2026-84194 | LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostnamelibrenms · librenms | High8.6 |
| CVE-2026-84193 | LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMPlibrenms · librenms | Medium5.8 |
| CVE-2026-84192 | LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Datalibrenms · librenms | High7.1 |
| CVE-2026-84191 | LibreNMS before 26.5.0 Stored XSS via SNMP VRF fieldslibrenms · librenms | Medium5.3 |
| CVE-2026-84190 | LibreNMS before 26.5.0 Remote Code Execution via AboutControllerlibrenms · librenms | High8.7 |
| CVE-2026-84189 | LibreNMS before 26.7.0 Stored XSS via Oxidized APIlibrenms · librenms | Critical9.2 |
| CVE-2026-84188 | librenms before 26.7.0 Stored XSS via graph_descr settingslibrenms · librenms | Medium4.8 |
| CVE-2026-55182 | LibreNMS: Remote Code Execution by Signal Alert Transportation Modulelibrenms · librenms | High8.6 |
| CVE-2026-45694 | LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameterslibrenms · librenms | Medium5.4 |
| CVE-2026-80214 | LibreNMS Virtualisation Discovery Module RCElibrenms · librenms | High8.6 |
| CVE-2026-6204 | LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand…librenms · librenms | High8.5 |
| CVE-2026-2728 | LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploitation requires…librenms · librenms | Medium4.6 |
| CVE-2026-26992 | LibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups namelibrenms · librenms | Medium5.1 |
| CVE-2026-26991 | LibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups namelibrenms · librenms | Medium5.1 |
| CVE-2026-27016 | LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()librenms · librenms | Medium5.4 |
| CVE-2026-26990 | LibreNMS has Time-Based Blind SQL Injection in address-search.inc.phplibrenms · librenms | High8.8 |
| CVE-2026-26989 | LibreNMS has Stored XSS in Alert Rulelibrenms · librenms | Medium4.3 |
| CVE-2026-26988 | LibreNMS: SQL Injection in ajax_table.php spreads through a covert data streamlibrenms · librenms | Critical9.3 |
| CVE-2026-26987 | LibreNMS affected by reflected XSS via email fieldlibrenms · librenms | Medium5.3 |
| CVE-2020-36947 | LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL InjectionLibreNMS · LibreNMS | High7.1 |
| CVE-2025-68614 | LibreNMS Alert Rule API Cross-Site Scripting Vulnerabilitylibrenms · librenms | Medium4.3 |
| CVE-2025-65093 | LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpointlibrenms · librenms | Medium5.5 |
| CVE-2025-65014 | LibreNMS has Weak Password Policylibrenms · librenms | Low3.7 |
| CVE-2025-65013 | LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`librenms · librenms | Medium6.2 |
| CVE-2025-62412 | LibreNMS alert-rules Cross-Site Scripting Vulnerabilitylibrenms · librenms | Low3.8 |
| CVE-2025-62411 | Stored XSS in Alert Transport name field in LibreNMSlibrenms · librenms | Medium5.5 |
| CVE-2025-62365 | LibreNMS vulnerable to Reflected-XSS in `report_this` functionlibrenms · librenms | Medium5.5 |
| CVE-2025-55296 | LibreNMS allows stored XSS in Alert Template name fieldlibrenms · librenms | Medium5.5 |
| CVE-2025-54138 | LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCElibrenms · librenms | High7.5 |
| CVE-2025-47931 | LibreNMS stored Cross-site Scripting vulnerability in poller group namelibrenms · librenms | Low2.1 |
| CVE-2024-56144 | Stored XSS-LibreNMS-Display Name 2 in librenmslibrenms · librenms | Medium4.6 |
| CVE-2025-23198 | Stored-XSS-LibreNMS-Display-Name in librenmslibrenms · librenms | Medium4.6 |
| CVE-2025-23199 | Stored XSS-LibreNMS-Ports in librenmslibrenms · librenms | Medium4.6 |
| CVE-2025-23200 | Stored XSS-LibreNMS-Misc Section in librenmslibrenms · librenms | Medium4.6 |
| CVE-2025-23201 | Reflected Cross-site Scripting on error alert in librenmslibrenms · librenms | Medium5.4 |
| CVE-2024-52526 | LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.phplibrenms · librenms | Medium4.8 |
| CVE-2024-51497 | LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.phplibrenms · librenms | Medium4.8 |
| CVE-2024-51496 | LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.phplibrenms · librenms | Medium4.8 |
| CVE-2024-51495 | LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.phplibrenms · librenms | Medium4.8 |
| CVE-2024-51494 | LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.phplibrenms · librenms | Medium4.8 |