librenms — Vulnerabilities & Security Advisories 95

LibreNMS is an open-source network monitoring system designed for automated discovery and comprehensive device tracking, primarily serving IT infrastructure teams. Its architecture, built on PHP and MySQL, has historically exposed it to a significant volume of security flaws, currently totaling 75 recorded CVEs. Common vulnerability classes include remote code execution, cross-site scripting, and SQL injection, often stemming from insufficient input validation in web interfaces. Privilege escalation issues have also been prevalent, allowing unauthorized users to gain administrative control. While the project maintains an active community response to patch these defects, the sheer number of disclosed issues highlights the challenges of maintaining complex web-based monitoring tools. Recent incidents have largely focused on authenticated attacks, emphasizing the critical need for strict access controls and regular updates to mitigate exploitation risks in production environments.