724 matches found
netbox
The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. For over a decade, it has been the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. NetBox offers ...
Netbox-CVE-2023-37625
Netbox-CVE-2023-37625 Description A stored cross-site scripting XSS vulnerability in Netbox alert1' 3. Add a new model, in this example add a 'manufacturer' model. 4. Open the newly created model as any authenticated user, and observer that the alert box has executed...
CVE-2025-69848-security-advisories
Reflected XSS in NetBox ProtectedError Handling CVE-2025-69848 Overview NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in the ProtectedError exception handling logic. When a delete operation...
CVE-2024-23780
CVE-2024-23780 Exploit for Netbox This script exploits CVE-2024-23780, which allows remote code execution RCE on Netbox instances. Usage python netboxexploit.py --url --username --password Parameters --url: URL of the Netbox instance. --username: Username for authentication with the Netbox...
CVE-2026-116845
A flaw was found in NetBox. An access control vulnerability in the bulk component creation interface allows an authenticated remote attacker to bypass authorization checks on parent devices and virtual machines VMs. By submitting arbitrary device or VM identifiers to BulkComponentCreateView, an...
CVE-2026-116845
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
EUVD-2026-116109
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2026-116845 NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2026-116845 NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2026-116845
NetBox versions 2.9.0 before 4.7.4 are affected by a broken access control vulnerability in the BulkComponentCreateView . This flaw allows authenticated users with add-component permissions to bypass view permissions on parent devices and virtual machines. By submitting arbitrary device or VM IDs...
CVE-2026-116845: netbox-community netbox: NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows…
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
GHSA-XW6W-GCFP-CF8M vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, sentry-fips, awx, netbox-fips, netbox, sentry...
GHSA-3547-9M27-7RXG vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, sentry-fips, awx, netbox-fips, netbox, sentry...
GHSA-33WH-FXXF-88VV vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, sentry-fips, awx, netbox-fips, netbox, sentry...
CVE-2026-114136 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, sentry-fips, awx, netbox-fips, netbox, sentry...
CVE-2026-114138 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, sentry-fips, awx, netbox-fips, netbox, sentry...
CVE-2026-114137 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, sentry-fips, awx, netbox-fips, netbox, sentry...
CVE-2026-57207
NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox too...
CVE-2026-57207 NetBox MCP Server: HTTP transport exposes all NetBox data without authentication
NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox too...
CVE-2026-57207
The NetBox MCP Server (prior to version 1.2.1 ) contains a vulnerability where the HTTP transport (when TRANSPORT=http is used) lacks authentication on the HTTP endpoint. This allows any client capable of reaching the port to establish a valid MCP session and gain full access to all four NetBox t...