[ Vendor · 7 CVEs ]
librenms
CVEs affecting librenms published in the last 30 days, plus any librenms CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109357 | 12 Oct 2026 | CVSS 8.1 | librenmsLibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped… | |
| CVE-2026-109352 | 12 Oct 2026 | CVSS 6.1 | librenmsLibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless… | |
| CVE-2026-109353 | 12 Oct 2026 | CVSS 7.1 | librenmsLibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued… | |
| CVE-2026-109354 | 12 Oct 2026 | CVSS 4.3 | librenmsLibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized… | |
| CVE-2026-109355 | 12 Oct 2026 | CVSS 6.1 | librenmsLibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP… | |
| CVE-2026-109356 | 12 Oct 2026 | CVSS 4.3 | librenmsLibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read users to physically delete… | |
| CVE-2026-108715 | 11 Oct 2026 | CVSS 4.3 | librenmsLibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe… |