740 matches found
netbox
The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. For over a decade, it has been the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. NetBox offers ...
CVE-2026-116845
A flaw was found in NetBox. An access control vulnerability in the bulk component creation interface allows an authenticated remote attacker to bypass authorization checks on parent devices and virtual machines VMs. By submitting arbitrary device or VM identifiers to BulkComponentCreateView, an...
CVE-2026-116845
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
EUVD-2026-116109
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2026-116845 NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2026-116845 NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2026-116845
NetBox versions 2.9.0 before 4.7.4 are affected by a broken access control vulnerability in the BulkComponentCreateView . This flaw allows authenticated users with add-component permissions to bypass view permissions on parent devices and virtual machines. By submitting arbitrary device or VM IDs...
CVE-2026-116845: netbox-community netbox: NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows…
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2024-23780
CVE-2024-23780 Exploit for Netbox This script exploits CVE-2024-23780, which allows remote code execution RCE on Netbox instances. Usage python netboxexploit.py --url --username --password Parameters --url: URL of the Netbox instance. --username: Username for authentication with the Netbox...
Netbox-CVE-2023-37625
Netbox-CVE-2023-37625 Description A stored cross-site scripting XSS vulnerability in Netbox alert1' 3. Add a new model, in this example add a 'manufacturer' model. 4. Open the newly created model as any authenticated user, and observer that the alert box has executed...
CVE-2025-69848-security-advisories
Reflected XSS in NetBox ProtectedError Handling CVE-2025-69848 Overview NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in the ProtectedError exception handling logic. When a delete operation...
netbox (4.7.2) potentially affected by CVE-2026-115910 via social-auth-core (5.1.1)
social-auth-core PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - netbox 4.7.2 Source cves: CVE-2026-115910 Source advisory: OSV:GHSA-H2R5-X5M7-3935...
netbox (>=4.7.0b1, <=4.7.1), weblate (>=2026.8.1, <=2026.9.1) potentially affected by CVE-2026-115910 via social-auth-core (5.1.0)
social-auth-core PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - netbox =4.7.0b1, =2026.8.1, =2026.9.1 Source cves: CVE-2026-115910 Source advisory: OSV:GHSA-H2R5-X5M7-3935...
netbox-types (>=4.5.4, <=4.6.5), umap-project (>=3.6.2, <=3.7.3) potentially affected by CVE-2026-115910 via social-auth-core (4.8.5)
social-auth-core PYPI version 4.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - netbox-types =4.5.4, =3.6.2, =3.7.3 Source cves: CVE-2026-115910 Source advisory: OSV:GHSA-H2R5-X5M7-3935...
GHSA-XW6W-GCFP-CF8M vulnerabilities
Vulnerabilities for packages: authentik, awx, sentry, sentry-fips, netbox, authentik-fips, netbox-fips...
GHSA-33WH-FXXF-88VV vulnerabilities
Vulnerabilities for packages: authentik, awx, sentry, sentry-fips, netbox, authentik-fips, netbox-fips...
GHSA-3547-9M27-7RXG vulnerabilities
Vulnerabilities for packages: authentik, awx, sentry, sentry-fips, netbox, authentik-fips, netbox-fips...
CVE-2026-114136 vulnerabilities
Vulnerabilities for packages: authentik, awx, sentry, sentry-fips, netbox, authentik-fips, netbox-fips...