Approved changes feed: RSS · Atom
cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Librenms (25283b06-e0bc-5281-97b7-2377267aa59f) |
|---|---|
| Product | Librenms (56219302-9857-566a-8ed8-b82838f9d57e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/librenms/librenms |
purl2cpe | 2026-06-01 10:15:26.338637 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15875 |
vulnerable | 2026-09-16 04:47:18.810831 |
Details available
MEDIUM (5)
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajax_table.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php, alertlog-stats.inc.php, alerts.inc.php, eventlog.inc.php, inventory.inc.php, ix-list.inc.php, ix-peers.inc.php, mempool-edit.inc.php, mempool.inc.php, poll-log.inc.php, processor-edit.inc.php, processor.inc.php, routing-edit.inc.php, sensors-common.inc.php, storage-edit.inc.php, storage.inc.php, and toner.inc.php (in includes/html/table). NOTE: some sources refer to this as CVE-2020-15876, but CVE-2020-15875 is the only correct CVE ID.
Published: 2026-09-13T00:00:00.000Z
Updated: 2026-09-14T14:30:30.126Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86426 |
vulnerable | 2026-09-16 04:32:58.880731 |
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to match token hashes, gaining access to API functionality including device credentials and administrative features that enable remote code execution through alert templates.
Published: 2026-09-07T12:53:47.884Z
Updated: 2026-09-08T13:39:33.066Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86427 |
vulnerable | 2026-09-16 04:32:58.815850 |
LibreNMS before 26.8.0 Argument Injection via graph_title
HIGH (8.8)
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized devices, or use newline injection to execute arbitrary rrdtool commands, bypassing per-device authorization checks.
Published: 2026-09-07T12:53:48.551Z
Updated: 2026-09-10T15:04:16.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6204 |
vulnerable | 2026-06-08 08:07:04.546654 |
Details available
LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature. Successful exploitation requires administrative privileges. Exploitation could result in compromise of the underlying web server.
Published: 2026-04-13T10:56:16.850Z
Updated: 2026-04-13T12:43:19.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2728 |
vulnerable | 2026-06-08 07:55:17.437332 |
Details available
LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploitation requires administrative privileges. Exploitation could result in XSS attacks being performed against other users with access to the page.
Published: 2026-04-13T10:39:54.757Z
Updated: 2026-04-13T12:59:06.750Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27016 |
vulnerable | 2026-06-08 07:53:21.829787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26992 |
vulnerable | 2026-06-08 07:53:21.807881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26991 |
vulnerable | 2026-06-08 07:53:21.807576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26990 |
vulnerable | 2026-06-08 07:53:21.807137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26989 |
vulnerable | 2026-06-08 07:53:21.806875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26988 |
vulnerable | 2026-06-08 07:53:21.806470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26987 |
vulnerable | 2026-06-08 07:53:21.806004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68614 |
vulnerable | 2026-06-08 07:41:21.456911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65093 |
vulnerable | 2026-06-08 07:39:20.703728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65014 |
vulnerable | 2026-06-08 07:39:20.622839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65013 |
vulnerable | 2026-06-08 07:39:20.622531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62412 |
vulnerable | 2026-06-08 07:37:29.639280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62411 |
vulnerable | 2026-06-08 07:37:29.638928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62365 |
vulnerable | 2026-06-08 07:37:29.579652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55296 |
vulnerable | 2026-06-08 07:33:14.573684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54138 |
vulnerable | 2026-06-08 07:33:11.630739 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47931 |
vulnerable | 2026-06-08 07:27:15.084511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23201 |
vulnerable | 2026-06-08 07:10:55.327287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23200 |
vulnerable | 2026-06-08 07:10:55.326909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23199 |
vulnerable | 2026-06-08 07:10:55.326644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23198 |
vulnerable | 2026-06-08 07:10:55.326219 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56144 |
vulnerable | 2026-06-08 06:54:17.459313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53457 |
vulnerable | 2026-06-08 06:54:15.032357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52526 |
vulnerable | 2026-06-08 06:52:15.347725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51497 |
vulnerable | 2026-06-08 06:52:12.164708 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51496 |
vulnerable | 2026-06-08 06:52:12.164367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51495 |
vulnerable | 2026-06-08 06:52:12.164017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51494 |
vulnerable | 2026-06-08 06:52:12.163655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51092 |
vulnerable | 2026-06-08 06:52:11.676545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50355 |
vulnerable | 2026-06-08 06:52:09.727507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50352 |
vulnerable | 2026-06-08 06:52:09.722531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50351 |
vulnerable | 2026-06-08 06:52:09.721976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50350 |
vulnerable | 2026-06-08 06:52:09.715831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49764 |
vulnerable | 2026-06-08 06:50:14.632797 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49759 |
vulnerable | 2026-06-08 06:50:14.621781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49758 |
vulnerable | 2026-06-08 06:50:14.621413 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49754 |
vulnerable | 2026-06-08 06:50:14.617167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47528 |
vulnerable | 2026-06-08 06:48:12.527095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47527 |
vulnerable | 2026-06-08 06:48:12.526700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47526 |
vulnerable | 2026-06-08 06:48:12.526364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47525 |
vulnerable | 2026-06-08 06:48:12.526005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47524 |
vulnerable | 2026-06-08 06:48:12.525622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47523 |
vulnerable | 2026-06-08 06:48:12.525187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32480 |
vulnerable | 2026-06-08 06:35:33.191094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32479 |
vulnerable | 2026-06-08 06:35:33.190604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32461 |
vulnerable | 2026-06-08 06:35:33.159649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5591 |
vulnerable | 2026-06-08 06:19:44.087730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5060 |
vulnerable | 2026-06-08 06:19:41.336084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4982 |
vulnerable | 2026-06-08 06:16:15.471260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4981 |
vulnerable | 2026-06-08 06:16:15.470679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4980 |
vulnerable | 2026-06-08 06:16:15.470233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4979 |
vulnerable | 2026-06-08 06:16:15.469862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4978 |
vulnerable | 2026-06-08 06:16:15.469482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4977 |
vulnerable | 2026-06-08 06:16:15.468984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4347 |
vulnerable | 2026-06-08 06:16:12.165439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48295 |
vulnerable | 2026-06-08 06:14:26.828983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48294 |
vulnerable | 2026-06-08 06:14:26.828528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46745 |
vulnerable | 2026-06-08 06:14:23.097454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4070 |
vulnerable | 2026-06-08 05:51:36.692984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4069 |
vulnerable | 2026-06-08 05:51:36.692420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4068 |
vulnerable | 2026-06-08 05:51:36.691927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4067 |
vulnerable | 2026-06-08 05:51:36.691435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3562 |
vulnerable | 2026-06-08 05:48:21.428751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3561 |
vulnerable | 2026-06-08 05:48:21.428287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3525 |
vulnerable | 2026-06-08 05:48:21.347971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3516 |
vulnerable | 2026-06-08 05:48:21.330603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3231 |
vulnerable | 2026-06-08 05:47:19.765470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0772 |
vulnerable | 2026-06-08 05:39:10.791617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0589 |
vulnerable | 2026-06-08 05:39:10.342604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0588 |
vulnerable | 2026-06-08 05:39:10.342066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0587 |
vulnerable | 2026-06-08 05:39:10.336896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0580 |
vulnerable | 2026-06-08 05:39:10.327522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0576 |
vulnerable | 2026-06-08 05:39:10.323294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0575 |
vulnerable | 2026-06-08 05:39:10.322720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43324 |
vulnerable | 2026-06-08 05:36:43.246403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31274 |
vulnerable | 2026-06-08 05:31:52.330276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36947 |
vulnerable | 2026-06-08 05:25:49.900052 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35700 |
vulnerable | 2026-06-08 05:25:01.563559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15877 |
vulnerable | 2026-06-08 05:19:27.083454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15873 |
vulnerable | 2026-06-08 05:19:27.082957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12465 |
vulnerable | 2026-06-08 05:12:39.179433 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12463 |
vulnerable | 2026-06-08 05:12:39.177528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10671 |
vulnerable | 2026-06-08 05:12:24.890989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10670 |
vulnerable | 2026-06-08 05:12:24.890733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10669 |
vulnerable | 2026-06-08 05:12:24.890462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10668 |
vulnerable | 2026-06-08 05:12:24.890168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10667 |
vulnerable | 2026-06-08 05:12:24.889868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10666 |
vulnerable | 2026-06-08 05:12:24.889563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10665 |
vulnerable | 2026-06-08 05:12:24.889142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20678 |
vulnerable | 2026-06-08 05:11:27.724251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18478 |
vulnerable | 2026-06-08 05:11:14.117825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16759 |
vulnerable | 2026-06-08 05:09:01.032698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.