High
CVE-2026-84192
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 106
Reset filters
High
CVE-2026-84189
LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page
Medium
CVE-2026-84188
LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users
Medium
CVE-2026-84190
LibreNMS Vulnerable to Remote Code Execution via AboutController
High
CVE-2026-55182
LibreNMS Vulnerable to Remote Code Execution by Signal Alert Transportation module
Medium
CVE-2026-45694
LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment
Low
CVE-2026-2728
LibreNMS: Cross-Site Scripting in ShowConfigController
High
CVE-2026-6204
LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write
High
CVE-2026-26990
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.php
Medium
CVE-2026-26989
LibreNMS has a Stored XSS in Alert Rule
High
CVE-2026-26988
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.
Medium
CVE-2026-27016
LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags()
Medium
CVE-2026-26992
LibreNMS /port-groups name Stored Cross-Site Scripting
Medium
CVE-2026-26991
LibreNMS /device-groups name Stored Cross-Site Scripting
Medium
CVE-2026-26987
LibreNMS affected by reflected xss via email field
High
CVE-2020-36947
LibreNMS contains an authenticated SQL Injection vulnerability
Medium
CVE-2025-68614
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
Medium
CVE-2025-65093
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Low
CVE-2025-65014
LibreNMS has Weak Password Policy
Medium
CVE-2025-65013
LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`
Low
CVE-2025-62412
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
Medium
CVE-2025-62411
LibreNMS has a Stored XSS vulnerability in its Alert Transport name field
Medium
CVE-2025-62365
LibreNMS is vulnerable to Reflected-XSS in `report_this` function
Medium
CVE-2025-55296
LibreNMS allows stored XSS in Alert Template name field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.