CVE-2025-66850

발견 사항 'LibreNMS' 애플리케이션에서 반사형 크로스 사이트 스크립팅Reflected XSS 취약점을 발견했습니다. 이 취약점은 라우팅 모듈의 protocol 매개변수에 존재하며, 공격자가 피해자의 브라우저에서 악성 JavaScript를 실행할 수 있게 합니다. 이 취약점은 22.9.02022년 9월부터 24.9.12024년 9월까지 모든 버전에 영향을 미칩니다. 이 취약점은 이후 CVE나 공개 공지 없이 24.10.02024년 11월에서 조용히 패치되었습니다. 문서화되지 않은 수정으로 인해 많은 조직이 자사의 노출을...

CVE-2026-30480

CVE-2026-30480: LibreNMS のパストラバーサルによるローカルファイルインクルージョン（LFI） 概要 LibreNMS の NFSen モジュールにローカルファイルインクルージョン（LFI）の脆弱性が存在します。認証済みの攻撃者がパストラバーサルシーケンスを悪用して、サーバーのファイルシステムから任意の PHP ファイルをインクルードできる可能性があります。...

CVE-2026-26988-LibreNMS-SQLi

CVE-2026-26988 – LibreNMS 인증되지 않은 SQL 인젝션 PoC 인증되지 않은 SQL 인젝션 이 LibreNMS ajaxtable.php의 IPv6 주소 검색 매개변수를 통해 발생합니다. 영향받는 버전 : LibreNMS ≤ 25.12.0 수정된 버전 : LibreNMS ≥ 26.1 커밋 15429580baba03ed1dd377bada1bde4b7a1175a1...

cs4239-cve-2020-15873

CVE-2020-15873 CVE-2020-15873의 개념 증명PoC - LibreNMS librenms librenms 개발 LibreNMS Docker 인스턴스 디버깅 1. 컨테이너에 셸을 획득합니다: $ sudo docker exec -it librenmsvuln /bin/bash 2. LibreNMS에서 생성된 로그를 읽으려면: $ tail -f /opt/librenms/logs/librenms.log...

CVE-2026-84194

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

CVE-2026-84188

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in...

CVE-2026-84193

LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enro...

CVE-2026-84189

LibreNMS through 26.4.0 renders JSON fields name, ip, model, author, commit message returned by the admin-configurable Oxidized integration URL oxidized.url into the device showconfig page without applying htmlspecialchars. An administrator who points the Oxidized URL at an attacker-controlled...

CVE-2026-84192

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog...

CVE-2026-84190

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

CVE-2026-84191

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrfname, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanitization. Attackers controlling a monitored network device can inject arbitrary...

CVE-2026-84193

LibreNMS through version 26.2.0 is affected by a stored cross-site scripting (XSS) vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields , including BGP peer descriptions, VRF names, process information, and SLA tags. An attacker with device management access o...

EUVD-2026-69031

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

CVE-2026-84194 LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

CVE-2026-84194 LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

CVE-2026-84193 LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP

LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enro...

CVE-2026-84193 LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP

LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enro...

CVE-2026-84194

LibreNMS versions >= 23.10.0 and

EUVD-2026-69030

LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enro...

CVE-2026-84192 LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog...