Vulnerabilidades em librenms

95 resultados
Análise Vexday

O LibreNMS acumula 74 CVEs catalogadas, sem nenhuma confirmada em exploração ativa no catálogo CISA KEV — taxa abaixo da média geral do catálogo. Ainda assim, o cenário merece atenção: a CVE mais perigosa identificada, CVE-2022-3562, apresenta EPSS de 0,9422, indicando altíssima probabilidade estatística de exploração, e há 2 vulnerabilidades com PoC pública disponível, o que reduz a barreira técnica para atacantes. A falha mais recorrente é CWE-79 (Cross-Site Scripting), padrão que, embora frequentemente subestimado, pode ser encadeado com outras fraquezas para escalada de impacto em aplicações de monitoramento de rede com acesso privilegiado. Equipes que mantêm instâncias do LibreNMS devem priorizar a remediação da CVE-2022-3562 e revisar exposições relacionadas a XSS, especialmente em ambientes acessíveis externamente.

CVE-2024-49759MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.phpEPSS 0.4%CVE-2024-51497MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.phpEPSS 0.4%CVE-2024-51494MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.phpEPSS 0.4%CVE-2024-51495MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.phpEPSS 0.4%CVE-2024-50351MEDIUMLibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.phpEPSS 0.4%CVE-2025-23201MEDIUMReflected Cross-site Scripting on error alert in librenmsEPSS 0.4%CVE-2024-49764MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.phpEPSS 0.4%CVE-2024-50350MEDIUMLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.phpEPSS 0.4%CVE-2024-47528MEDIUMLibreNMS Contains a Stored XSS via File UploadEPSS 0.4%CVE-2024-56144MEDIUMStored XSS-LibreNMS-Display Name 2 in librenmsEPSS 0.4%CVE-2026-84189CRITICALLibreNMS before 26.7.0 Stored XSS via Oxidized APIEPSS 0.4%CVE-2025-23198MEDIUMStored-XSS-LibreNMS-Display-Name in librenmsEPSS 0.4%CVE-2024-49758MEDIUMLibreNMS has a stored XSS in ExamplePlugin with Device's NotesEPSS 0.4%CVE-2026-84193MEDIUMLibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMPEPSS 0.3%CVE-2024-50355MEDIUMLibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple EndpointsEPSS 0.3%CVE-2026-26987MEDIUMLibreNMS affected by reflected XSS via email fieldEPSS 0.3%CVE-2026-84192HIGHLibreNMS before 26.3.1 Stored XSS via SNMP/Syslog DataEPSS 0.3%CVE-2026-109353HIGHLibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.phpEPSS 0.3%CVE-2025-62412LOWLibreNMS alert-rules Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2026-26989MEDIUMLibreNMS has Stored XSS in Alert RuleEPSS 0.3%