PT-2025-42520

Name of the Vulnerable Software and Affected Versions LibreNMS versions 25.8.0 through 25.10.0 Description LibreNMS contains a flaw in the Alerts Alert Rules page where the alert rule name is not properly sanitized. This allows for the injection of HTML code, potentially leading to Cross-Site...

PT-2020-14679

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 1.65.1 Description The issue allows an authenticated attacker to achieve SQL Injection. This is possible via the device id POST parameter to the "ajax form.php" endpoint. Recommendations For versions prior to 1.65.1,...

PT-2018-14480

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 1.44 Description The issue allows remote attackers to inject arbitrary web script or HTML via the dashboard name parameter in the "/ajax form.php" API endpoint, related to files such as...