CVE-2026-30480

CVE-2026-30480: LibreNMS のパストラバーサルによるローカルファイルインクルージョン（LFI） 概要 LibreNMS の NFSen モジュールにローカルファイルインクルージョン（LFI）の脆弱性が存在します。認証済みの攻撃者がパストラバーサルシーケンスを悪用して、サーバーのファイルシステムから任意の PHP ファイルをインクルードできる可能性があります。 フィールド| 値 ---|--- 製品| LibreNMS ベンダー| LibreNMS Project 脆弱性タイプ| ローカルファイルインクルージョン（LFI）/ パストラバーサル CWE|...

CVE-2026-26988-LibreNMS-SQLi

CVE-2026-26988 – LibreNMS 認証なしSQLインジェクション PoC LibreNMS ajaxtable.php におけるIPv6アドレス検索パラメータを介した認証なしSQLインジェクション 。 影響を受けるバージョン : LibreNMS ≤ 25.12.0 修正バージョン : LibreNMS ≥ 26.1（コミット 15429580baba03ed1dd377bada1bde4b7a1175a1） CVSS v4.0 : 9.3 Critical CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N CWE :...

CVE-2025-66850

発見 「LibreNMS」アプリケーション内で、反射型クロスサイトスクリプティング（XSS）の脆弱性を発見しました。この脆弱性はルーティングモジュールのprotocolパラメータに存在し、攻撃者が被害者のブラウザで悪意のあるJavaScriptを実行させる可能性があります。 この脆弱性はバージョン22.9.0（2022年9月）から24.9.1（2024年9月）までのすべてのバージョンに影響します。この脆弱性はバージョン24.10.0（2024年11月）で、その後のCVEや公開開示なしに密かに修正されました。...

cs4239-cve-2020-15873

CVE-2020-15873 CVE-2020-15873 の概念実証 - Librenms librenms librenms 開発 LibreNMS Docker インスタンスのデバッグ 1. コンテナへのシェルを取得します: $ sudo docker exec -it librenmsvuln /bin/bash 2. LibreNMS が生成するログを読み取るには: $ tail -f /opt/librenms/logs/librenms.log MariaDB Docker インスタンスのデバッグ 1. コンテナへのシェルを取得します: $ sudo docker exec...

The vulnerability of the proxmox.inc.php script in the network monitoring system LibreNMS allows attackers to perform cross-site scripting attacks.

The vulnerability of the proxmox.inc.php script in the LibreNMS network monitoring system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2020-15875

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...

CVE-2020-15875

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...

CVE-2020-15875

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...

PT-2026-90940

🚨 CVE-2020-15875 An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajax table.php API endpoint. This affects as-selection.inc.php,...

EUVD-2020-31272

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...

CVE-2020-15875

LibreNMS 1.65 is vulnerable to an authenticated SQL injection via the searchPhrase parameter in the /ajax_table.php API endpoint. A remote attacker with normal privileges can extract all information from the database. The flaw affects multiple .inc.php files under includes/html/table, including a...

CVE-2020-15875: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...

CVE-2020-15875

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...

LibreNMS <= 26.7.0 - Unauthenticated API Access

LibreNMS = 26.8.0 contains an authentication bypass caused by MySQL type coercion in the REST API token validation, letting unauthenticated attackers access protected endpoints and execute remote code via alert templates. id: CVE-2026-86426 info: name: LibreNMS = 26.7.0 - Unauthenticated API Acce...

Improper Authentication

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Improper Authentication in the REST API process. An attacker can gain unauthorized access to protected endpoints by...

Arbitrary Command Injection

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Arbitrary Command Injection via the graphtitle parameter. An attacker can inject arbitrary arguments into the rrdtool...

CVE-2026-86427

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...

CVE-2026-86426

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...

CVE-2026-86427 LibreNMS before 26.8.0 Argument Injection via graph_title

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...

EUVD-2026-72385

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...