netbox

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

Netbox-CVE-2023-37625

Netbox-CVE-2023-37625 Description A stored cross-site scripting XSS vulnerability in Netbox alert1' 3. Add a new model, in this example add a 'manufacturer' model. 4. Open the newly created model as any authenticated user, and observer that the alert box has executed...

CVE-2025-69848-security-advisories

Reflected XSS in NetBox ProtectedError Handling CVE-2025-69848 Overview NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in the ProtectedError exception handling logic. When a delete operation...

CVE-2024-23780

CVE-2024-23780 Exploit for Netbox This script exploits CVE-2024-23780, which allows remote code execution RCE on Netbox instances. Usage python netboxexploit.py --url --username --password Parameters --url: URL of the Netbox instance. --username: Username for authentication with the Netbox...

GHSA-33WH-FXXF-88VV vulnerabilities

Vulnerabilities for packages: awx, sentry, authentik-fips, netbox-fips, sentry-fips, netbox, authentik...

GHSA-3547-9M27-7RXG vulnerabilities

Vulnerabilities for packages: awx, sentry, authentik-fips, netbox-fips, sentry-fips, netbox, authentik...

GHSA-XW6W-GCFP-CF8M vulnerabilities

Vulnerabilities for packages: awx, sentry, authentik-fips, netbox-fips, sentry-fips, netbox, authentik...

CVE-2026-114137 vulnerabilities

Vulnerabilities for packages: awx, sentry, authentik-fips, netbox-fips, sentry-fips, netbox, authentik...

CVE-2026-114138 vulnerabilities

Vulnerabilities for packages: awx, sentry, authentik-fips, netbox-fips, sentry-fips, netbox, authentik...

CVE-2026-114136 vulnerabilities

Vulnerabilities for packages: awx, sentry, authentik-fips, netbox-fips, sentry-fips, netbox, authentik...

CVE-2026-57207

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox too...

CVE-2026-57207

The NetBox MCP Server (prior to version 1.2.1 ) contains a vulnerability where the HTTP transport (when TRANSPORT=http is used) lacks authentication on the HTTP endpoint. This allows any client capable of reaching the port to establish a valid MCP session and gain full access to all four NetBox t...

EUVD-2026-108992

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox too...

CVE-2026-57207 NetBox MCP Server: HTTP transport exposes all NetBox data without authentication

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox too...

CVE-2026-57207 NetBox MCP Server: HTTP transport exposes all NetBox data without authentication

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox too...

PT-2026-122112

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session and full access to all four NetBox too...

CVE-2026-112397 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pillow, pgadmin4-fips, gftools, open-webui, nemo-gym, pgadmin4, superset, tensorflow-gpu-jupyter, kserve, nemo-rl-cuda-13.0, netbox-fips, apache-beam-python-3.14-sdk, py3-pytorch-cuda-13.0, kserve-xgbserver,...

CVE-2026-112895 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pillow, pgadmin4-fips, gftools, open-webui, nemo-gym, pgadmin4, superset, tensorflow-gpu-jupyter, kserve, nemo-rl-cuda-13.0, netbox-fips, apache-beam-python-3.14-sdk, py3-pytorch-cuda-13.0, kserve-xgbserver,...

CVE-2026-112896 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pillow, pgadmin4-fips, gftools, open-webui, nemo-gym, pgadmin4, superset, tensorflow-gpu-jupyter, kserve, nemo-rl-cuda-13.0, netbox-fips, apache-beam-python-3.14-sdk, py3-pytorch-cuda-13.0, kserve-xgbserver,...

GHSA-58R4-6RV3-GFH8 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pillow, pgadmin4-fips, gftools, open-webui, nemo-gym, pgadmin4, superset, tensorflow-gpu-jupyter, kserve, nemo-rl-cuda-13.0, netbox-fips, apache-beam-python-3.14-sdk, py3-pytorch-cuda-13.0, kserve-xgbserver,...