Vulnerabilities in LibreNMS
95 resultsCVE-2026-109354MEDIUMLibreNMS before 26.9.0 Path Traversal via NFSen channel ParameterEPSS 0.3%CVE-2025-65014LOWLibreNMS has Weak Password PolicyEPSS 0.3%CVE-2025-65013MEDIUMLibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`EPSS 0.3%CVE-2026-108715MEDIUMLibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.phpEPSS 0.3%CVE-2026-27016MEDIUMLibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()EPSS 0.3%CVE-2026-84191MEDIUMLibreNMS before 26.5.0 Stored XSS via SNMP VRF fieldsEPSS 0.3%CVE-2026-84188MEDIUMlibrenms before 26.7.0 Stored XSS via graph_descr settingsEPSS 0.3%CVE-2026-26992MEDIUMLibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups nameEPSS 0.3%CVE-2026-26991MEDIUMLibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups nameEPSS 0.3%CVE-2025-62365MEDIUMLibreNMS vulnerable to Reflected-XSS in `report_this` functionEPSS 0.2%CVE-2026-109352MEDIUMLibreNMS before 26.9.0 Stored XSS via wireless sensor descriptionEPSS 0.2%CVE-2026-45694MEDIUMLibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parametersEPSS 0.2%CVE-2026-2728MEDIUMLibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploEPSS 0.2%CVE-2026-109356MEDIUMLibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsControllerEPSS 0.2%CVE-2026-109355MEDIUMLibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node ListEPSS 0.2%