VulertSecurity VulertSecurity

Vulnerability Database · Packagist · librenms/librenms · Version

librenms/librenms 22.4.1

22.4.1 is affected by 83 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 6 High 31 Medium 41 Low 5 Unrated 0

All librenms/librenms versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

librenms/librenms 22.4.1 vulnerabilities

83 vulnerabilities cover librenms/librenms 22.4.1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2022-4070: Insufficient Session Expiration in librenms/librenms 9.8 critical 22.10.0 20 Nov 2022
CVE-2022-40705: Apache SOAP's RPCRouterServlet allows reading of arbitrary files over HTTP 9.8 critical 22.10.0 20 Nov 2022
CVE-2019-10665: LibreNMS Information Disclosure 9.8 critical No fix published 24 May 2022
CVE-2018-20434: LibreNMS arbitrary OS commands execution 9.8 critical No fix published 24 May 2022
CVE-2021-44278: Path traversal vulnerability in librenms/librenms 9.8 critical No fix published 10 Dec 2021
CVE-2024-51092: LibreNMS Authenticated OS Command Injection Vulnerability 9.1 critical 24.10.0 15 Nov 2024
CVE-2026-26990: LibreNMS Time-Based Blind SQL Injection Vulnerability 8.8 high 26.2.0 18 Feb 2026
CVE-2024-32461: SQL Injection Vulnerability in LibreNMS 8.8 high 24.4.0 22 Apr 2024
CVE-2022-35253: Denial of Service in Hyperledger Fabric 8.8 high 22.10.0 20 Nov 2022
CVE-2022-3525: Deserialization of Untrusted Data in librenms/librenms 8.8 high No fix published 20 Nov 2022
CVE-2026-55182: LibreNMS Remote Code Execution Vulnerability via Signal Alert Transport Module 8.6 high 26.5.0 18 Aug 2026
CVE-2023-5060: Cross-Site Scripting in librenms/librenms 8.4 high 23.9.1 19 Sep 2023
Persistent XSS Vulnerability in LibreNMS via Oxidized API Integration 8.1 high 26.7.0 18 Aug 2026
SQL Injection in librenms/librenms 7.8 high 23.10.0 16 Oct 2023
Remote Code Execution Vulnerability in LibreNMS: Arbitrary File Write Risk 7.6 high 26.3.0 26 Mar 2026
CVE-2023-4347: LibreNMS Cross-site Scripting vulnerability 7.6 high 23.8.0 15 Aug 2023
CVE-2022-4068: Cross-site Scripting in librenms/librenms 7.6 high 22.10.0 20 Nov 2022
CVE-2025-54138: LibreNMS Authenticated Remote File Inclusion Vulnerability 7.5 high 25.7.0 21 Jul 2025
CVE-2024-52526: Stored XSS Vulnerability in LibreNMS Package 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51497: Stored XSS Vulnerability in LibreNMS Custom OID Functionality 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51496: Reflected XSS Vulnerability in LibreNMS Package 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51495: LibreNMS Stored XSS Vulnerability in Device Overview Page 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51494: LibreNMS Stored XSS Vulnerability in Port Settings 7.5 high 24.10.0 15 Nov 2024
CVE-2024-50352: Stored XSS Vulnerability in LibreNMS Services Section 7.5 high 24.10.0 15 Nov 2024
CVE-2024-50351: Reflected XSS Vulnerability in LibreNMS 7.5 high 24.10.0 15 Nov 2024
CVE-2024-50350: LibreNMS Stored XSS Vulnerability in Port Settings Page 7.5 high 24.10.0 15 Nov 2024
CVE-2024-49764: Stored XSS Vulnerability in LibreNMS Allows JavaScript Injection 7.5 high 24.10.0 15 Nov 2024
CVE-2024-49759: Stored XSS Vulnerability in librenms Package 7.5 high 24.10.0 15 Nov 2024
CVE-2024-49754: LibreNMS Stored XSS Vulnerability in API Access Page 7.5 high 24.10.0 15 Nov 2024
CVE-2024-47523: Stored XSS Vulnerability in LibreNMS Alert Transports 7.5 medium 24.9.0 01 Oct 2024
CVE-2024-47525: Stored XSS Vulnerability in LibreNMS Alert Rules Feature 7.5 medium 24.9.0 01 Oct 2024
CVE-2024-47527: LibreNMS Stored XSS Vulnerability in Device Dependencies Feature 7.5 medium 24.9.0 01 Oct 2024
CVE-2024-50355: LibreNMS Persistent XSS Vulnerability Due to Insecure Input Sanitization 7.2 high 24.10.0 15 Nov 2024
CVE-2024-47524: Stored XSS Vulnerability in LibreNMS Device Group Name 7.2 high 24.9.0 01 Oct 2024
CVE-2024-32480: LibreNMS Time-Based Blind SQL Injection Vulnerability 7.2 high 24.4.0 22 Apr 2024
Stored XSS Vulnerability in LibreNMS via SNMP/Syslog Data 7.1 high 26.5.0 26 Aug 2026
CVE-2020-36947: LibreNMS Authenticated SQL Injection Vulnerability 7.1 high No fix published 27 Jan 2026
CVE-2024-32479: Stored XSS in LibreNMS 7.1 high 24.4.0 22 Apr 2024
CVE-2024-49758: LibreNMS Stored XSS Vulnerability in Device Notes 6.8 medium 24.10.0 15 Nov 2024
Remote Code Execution Vulnerability in LibreNMS 26.3.1 via AboutController 6.4 medium 26.5.0 18 Aug 2026
LibreNMS Cross-site Scripting Vulnerability 6.3 medium 23.11.0 17 Nov 2023
CVE-2025-65013: LibreNMS Reflected XSS Vulnerability in Node Image Parameter 6.2 medium 25.11.0 18 Nov 2025
CVE-2023-4978: LibreNMS Cross-site Scripting vulnerability 6.1 medium 23.9.0 15 Sep 2023
CVE-2022-3561: Cross-site Scripting in librenms/librenms 6.1 medium 22.10.0 20 Nov 2022
CVE-2022-3516: Cross-site Scripting in librenms/librenms 6.1 medium 22.10.0 20 Nov 2022
CVE-2022-36745: Cross-Site Scripting (XSS) in LibreNMS 6.1 medium 22.7.0 31 Aug 2022
CVE-2022-36746: LibreNMS XSS Vulnerability 6.1 medium 22.7.0 31 Aug 2022
CVE-2021-44279: Cross-site Scripting in LibreNMS 6.1 medium No fix published 03 Dec 2021
CVE-2021-44277: Cross-site Scripting in LibreNMS 6.1 medium No fix published 03 Dec 2021
CVE-2017-16759: LibreNMS Arbitrary File Read 5.9 medium 2017-08-18 13 May 2022
CVE-2025-65093: LibreNMS SQL Injection Vulnerability in ajax_output.php 5.5 medium No fix published 18 Nov 2025
CVE-2025-62411: Stored XSS Vulnerability in LibreNMS Alert Transport Name Field 5.5 medium 25.10.0 16 Oct 2025
CVE-2025-55296: Stored XSS Vulnerability in LibreNMS Alert Template 5.5 medium 25.8.0 18 Aug 2025
CVE-2026-45694: LibreNMS Reflected XSS via Proxmox Instance/VMID GET Parameters 5.4 medium 26.5.0 12 Aug 2026
CVE-2025-23201: Librenms Reflected XSS Vulnerability in Community Parameter 5.4 medium 24.11.0 16 Jan 2025
CVE-2023-4982: LibreNMS Cross-site Scripting vulnerability 5.4 medium 23.9.0 15 Sep 2023
CVE-2023-4977: Code Injection in LibreNMS 5.4 medium 23.9.0 15 Sep 2023
CVE-2023-4979: LibreNMS Cross-site Scripting vulnerability 5.4 medium 23.9.0 15 Sep 2023
CVE-2023-4980: LibreNMS Cross-site Scripting vulnerability 5.4 medium 23.9.0 15 Sep 2023
CVE-2023-4981: LibreNMS Cross-site Scripting vulnerability 5.4 medium 23.9.0 15 Sep 2023
CVE-2022-3562: Cross-site Scripting in librenms/librenms 5.4 medium 22.10.0 20 Nov 2022
CVE-2022-4067: Cross-site Scripting in librenms/librenms 5.4 medium 22.10.0 20 Nov 2022
CVE-2022-35628: SQL Injection in TYPO3 extension "LUX - TYPO3 Marketing Automation" 5.4 medium 22.10.0 20 Nov 2022
CVE-2022-3231: Stored Cross-site Scripting in LibreNMS via Schedule Maintenance 5.4 medium 22.9.0 18 Sep 2022
CVE-2026-26987: LibreNMS Reflected XSS Vulnerability via Email Field 5.3 medium 26.2.0 18 Feb 2026
CVE-2023-46745: LibreNMS vulnerable to rate limiting bypass on login page 5.3 medium 23.11.0 17 Nov 2023
CVE-2026-26992: LibreNMS Stored Cross-Site Scripting Vulnerability in Port Groups 5.1 medium 26.2.0 18 Feb 2026
CVE-2026-26991: LibreNMS Device Groups Name Stored Cross-Site Scripting Vulnerability 5.1 medium 26.2.0 18 Feb 2026
Stored XSS Vulnerability in LibreNMS: Impacting Authenticated Users via Graph Descriptions 4.8 medium 26.7.0 18 Aug 2026
Stored XSS Vulnerability in LibreNMS Package - CVSS Score 6.1 4.8 low 24.9.0 01 Oct 2024
CVE-2022-4069: Cross-site Scripting in librenms/librenms 4.8 medium 22.10.0 20 Nov 2022
CVE-2026-2728: LibreNMS Authenticated XSS Vulnerability on Showconfig Page 4.6 medium 26.3.0 13 Apr 2026
CVE-2025-23199: LibreNMS Ports Stored Cross-site Scripting Vulnerability 4.6 medium 24.11.0 16 Jan 2025
CVE-2026-26989: Stored XSS Vulnerability in LibreNMS Alert Rule Creation 4.3 medium 26.2.0 18 Feb 2026
CVE-2025-68614: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability 4.3 medium 25.12.0 23 Dec 2025
CVE-2023-48294: Broken Access Control on Graphs Feature in LibreNMS 4.3 medium 23.11.0 17 Nov 2023
CVE-2025-62412: LibreNMS Alert Rules Cross-Site Scripting Vulnerability 3.8 low 25.10.0 16 Oct 2025
CVE-2025-65014: LibreNMS Weak Password Policy Vulnerability 3.7 low 25.11.0 18 Nov 2025
CVE-2024-47526: LibreNMS Self-XSS Vulnerability in Alert Templates Feature 3.5 low 24.9.0 01 Oct 2024
CVE-2025-47931: LibreNMS Stored XSS Vulnerability in Poller Group Name 2.1 low 25.5.0 19 May 2025
Critical Remote Code Execution Vulnerability in LibreNMS Package N/A high 26.3.0 13 Apr 2026
CVE-2026-26988: LibreNMS SQL Injection Vulnerability in IPv6 Address Search N/A high 26.2.0 18 Feb 2026
CVE-2025-62365: LibreNMS Reflected XSS Vulnerability in report_this Function N/A medium 25.7.0 13 Oct 2025

Looking for another version, or everything Vulert holds for librenms/librenms?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About librenms/librenms 22.4.1

Is librenms/librenms 22.4.1 vulnerable?

Yes. 83 vulnerabilities in the Vulert database cover librenms/librenms 22.4.1: 6 critical, 31 high, 41 medium and 5 low. Each entry above names the fixed version to move to.

How do I monitor librenms/librenms for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the librenms/librenms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.