Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

librenms — Vulnerabilities & Security Advisories 63

All 63 CVE vulnerabilities found in librenms, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the open-source network monitoring application LibreNMS. The collection includes critical and high-severity flaws such as remote code execution, cross-site scripting, and information disclosure, covering advisories published from 2019 through the present. Here you can track the vendor's security notices, understand the common weakness classes impacting the product, and review its historical vulnerability timeline to assess risk trends over time.

Vendor: librenms

CVE ID Title CVSS Severity Published
CVE-2025-55296 LibreNMS allows stored XSS in Alert Template name field CWE-79 5.5 Medium 2025-08-18
CVE-2025-54138 LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE CWE-98 7.5 High 2025-07-22
CVE-2025-47931 LibreNMS stored Cross-site Scripting vulnerability in poller group name CWE-79 5.4AI Medium AI 2025-05-17
CVE-2024-56144 Stored XSS-LibreNMS-Display Name 2 in librenms CWE-79 4.6 Medium 2025-01-16
CVE-2025-23198 Stored-XSS-LibreNMS-Display-Name in librenms CWE-79 4.6 Medium 2025-01-16
CVE-2025-23199 Stored XSS-LibreNMS-Ports in librenms CWE-79 4.6 Medium 2025-01-16
CVE-2025-23200 Stored XSS-LibreNMS-Misc Section in librenms CWE-79 4.6 Medium 2025-01-16
CVE-2025-23201 Reflected Cross-site Scripting on error alert in librenms CWE-79 5.4 Medium 2025-01-16
CVE-2024-52526 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-51497 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-51496 LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-51495 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-51494 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-50355 LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints CWE-79 4.8 Medium 2024-11-15
CVE-2024-50352 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-50351 LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-50350 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-49764 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-49759 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php CWE-79 4.8 Medium 2024-11-15
CVE-2024-49758 LibreNMS has a stored XSS in ExamplePlugin with Device's Notes CWE-79 4.8 Medium 2024-11-15
CVE-2024-49754 LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php CWE-79 7.5 High 2024-11-15
CVE-2024-47523 LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature CWE-79 7.5 High 2024-10-01
CVE-2024-47524 LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name CWE-79 7.2 High 2024-10-01
CVE-2024-47525 Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php CWE-79 7.5 High 2024-10-01
CVE-2024-47526 LibreNMS has a Self-XSS ('Cross-site Scripting') in librenms/includes/html/modal/alert_template.inc.php CWE-79 3.5 Low 2024-10-01
CVE-2024-47527 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php CWE-79 7.5 High 2024-10-01
CVE-2024-47528 LibreNMS Contains a Stored XSS via File Upload CWE-116 4.8 - 2024-10-01
CVE-2024-32480 LibreNMS's Time-Based Blind SQL injection leads to database extraction CWE-89 7.2 High 2024-04-22
CVE-2024-32479 LibreNMS's Improper Sanitization on Service template name leads to Stored XSS CWE-79 7.1 High 2024-04-22
CVE-2024-32461 LibreNMS vulnerable to time-based SQL injection that leads to database extraction CWE-89 7.1 High 2024-04-22

All 63 known CVE vulnerabilities affecting librenms with full Chinese analysis, references, and POCs where available.