LibreNMS vulnerabilities

CVEs per yearBy the year they were published

1. 202216
2. 202312
3. 202422
4. 202515
5. 202630

Newest CVEs

• CVE-2026-109357

  LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header

  librenms · librenms

  Critical9.2
• CVE-2026-109356

  LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController

  librenms · librenms

  Medium5.3
• CVE-2026-109355

  LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List

  librenms · librenms

  Medium5.3
• CVE-2026-109354

  LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter

  librenms · librenms

  Medium5.3
• CVE-2026-109353

  LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php

  librenms · librenms

  High7.1
• CVE-2026-109352

  LibreNMS before 26.9.0 Stored XSS via wireless sensor description

  librenms · librenms

  Medium5.3
• CVE-2026-108715

  LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php

  librenms · librenms

  Medium5.3
• CVE-2020-15875

  An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via…

  LibreNMS · LibreNMS

  Medium5.0
• CVE-2026-86427

  LibreNMS before 26.8.0 Argument Injection via graph_title

  librenms · librenms

  High8.7
• CVE-2026-86426

  LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

  librenms · librenms

  Critical9.2