VulertSecurity VulertSecurity

Vulnerability Database · Packagist · librenms/librenms · Version

librenms/librenms 23.9.1

23.9.1 is affected by 63 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 4 High 27 Medium 27 Low 5 Unrated 0

All librenms/librenms versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

librenms/librenms 23.9.1 vulnerabilities

63 vulnerabilities cover librenms/librenms 23.9.1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2019-10665: LibreNMS Information Disclosure 9.8 critical No fix published 24 May 2022
CVE-2018-20434: LibreNMS arbitrary OS commands execution 9.8 critical No fix published 24 May 2022
CVE-2021-44278: Path traversal vulnerability in librenms/librenms 9.8 critical No fix published 10 Dec 2021
CVE-2024-51092: LibreNMS Authenticated OS Command Injection Vulnerability 9.1 critical 24.10.0 15 Nov 2024
CVE-2026-26990: LibreNMS Time-Based Blind SQL Injection Vulnerability 8.8 high 26.2.0 18 Feb 2026
CVE-2024-32461: SQL Injection Vulnerability in LibreNMS 8.8 high 24.4.0 22 Apr 2024
CVE-2022-3525: Deserialization of Untrusted Data in librenms/librenms 8.8 high No fix published 20 Nov 2022
CVE-2026-55182: LibreNMS Remote Code Execution Vulnerability via Signal Alert Transport Module 8.6 high 26.5.0 18 Aug 2026
Persistent XSS Vulnerability in LibreNMS via Oxidized API Integration 8.1 high 26.7.0 18 Aug 2026
SQL Injection in librenms/librenms 7.8 high 23.10.0 16 Oct 2023
Remote Code Execution Vulnerability in LibreNMS: Arbitrary File Write Risk 7.6 high 26.3.0 26 Mar 2026
CVE-2025-54138: LibreNMS Authenticated Remote File Inclusion Vulnerability 7.5 high 25.7.0 21 Jul 2025
CVE-2024-52526: Stored XSS Vulnerability in LibreNMS Package 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51497: Stored XSS Vulnerability in LibreNMS Custom OID Functionality 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51496: Reflected XSS Vulnerability in LibreNMS Package 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51495: LibreNMS Stored XSS Vulnerability in Device Overview Page 7.5 high 24.10.0 15 Nov 2024
CVE-2024-51494: LibreNMS Stored XSS Vulnerability in Port Settings 7.5 high 24.10.0 15 Nov 2024
CVE-2024-50352: Stored XSS Vulnerability in LibreNMS Services Section 7.5 high 24.10.0 15 Nov 2024
CVE-2024-50351: Reflected XSS Vulnerability in LibreNMS 7.5 high 24.10.0 15 Nov 2024
CVE-2024-50350: LibreNMS Stored XSS Vulnerability in Port Settings Page 7.5 high 24.10.0 15 Nov 2024
CVE-2024-49764: Stored XSS Vulnerability in LibreNMS Allows JavaScript Injection 7.5 high 24.10.0 15 Nov 2024
CVE-2024-49759: Stored XSS Vulnerability in librenms Package 7.5 high 24.10.0 15 Nov 2024
CVE-2024-49754: LibreNMS Stored XSS Vulnerability in API Access Page 7.5 high 24.10.0 15 Nov 2024
CVE-2024-47523: Stored XSS Vulnerability in LibreNMS Alert Transports 7.5 medium 24.9.0 01 Oct 2024
CVE-2024-47525: Stored XSS Vulnerability in LibreNMS Alert Rules Feature 7.5 medium 24.9.0 01 Oct 2024
CVE-2024-47527: LibreNMS Stored XSS Vulnerability in Device Dependencies Feature 7.5 medium 24.9.0 01 Oct 2024
CVE-2024-50355: LibreNMS Persistent XSS Vulnerability Due to Insecure Input Sanitization 7.2 high 24.10.0 15 Nov 2024
CVE-2024-47524: Stored XSS Vulnerability in LibreNMS Device Group Name 7.2 high 24.9.0 01 Oct 2024
CVE-2024-32480: LibreNMS Time-Based Blind SQL Injection Vulnerability 7.2 high 24.4.0 22 Apr 2024
Stored XSS Vulnerability in LibreNMS via SNMP/Syslog Data 7.1 high 26.5.0 26 Aug 2026
CVE-2020-36947: LibreNMS Authenticated SQL Injection Vulnerability 7.1 high No fix published 27 Jan 2026
CVE-2024-32479: Stored XSS in LibreNMS 7.1 high 24.4.0 22 Apr 2024
CVE-2024-49758: LibreNMS Stored XSS Vulnerability in Device Notes 6.8 medium 24.10.0 15 Nov 2024
Remote Code Execution Vulnerability in LibreNMS 26.3.1 via AboutController 6.4 medium 26.5.0 18 Aug 2026
LibreNMS Cross-site Scripting Vulnerability 6.3 medium 23.11.0 17 Nov 2023
CVE-2025-65013: LibreNMS Reflected XSS Vulnerability in Node Image Parameter 6.2 medium 25.11.0 18 Nov 2025
CVE-2021-44279: Cross-site Scripting in LibreNMS 6.1 medium No fix published 03 Dec 2021
CVE-2021-44277: Cross-site Scripting in LibreNMS 6.1 medium No fix published 03 Dec 2021
CVE-2017-16759: LibreNMS Arbitrary File Read 5.9 medium 2017-08-18 13 May 2022
CVE-2025-65093: LibreNMS SQL Injection Vulnerability in ajax_output.php 5.5 medium No fix published 18 Nov 2025
CVE-2025-62411: Stored XSS Vulnerability in LibreNMS Alert Transport Name Field 5.5 medium 25.10.0 16 Oct 2025
CVE-2025-55296: Stored XSS Vulnerability in LibreNMS Alert Template 5.5 medium 25.8.0 18 Aug 2025
CVE-2026-45694: LibreNMS Reflected XSS via Proxmox Instance/VMID GET Parameters 5.4 medium 26.5.0 12 Aug 2026
CVE-2025-23201: Librenms Reflected XSS Vulnerability in Community Parameter 5.4 medium 24.11.0 16 Jan 2025
CVE-2026-26987: LibreNMS Reflected XSS Vulnerability via Email Field 5.3 medium 26.2.0 18 Feb 2026
CVE-2023-46745: LibreNMS vulnerable to rate limiting bypass on login page 5.3 medium 23.11.0 17 Nov 2023
CVE-2026-26992: LibreNMS Stored Cross-Site Scripting Vulnerability in Port Groups 5.1 medium 26.2.0 18 Feb 2026
CVE-2026-26991: LibreNMS Device Groups Name Stored Cross-Site Scripting Vulnerability 5.1 medium 26.2.0 18 Feb 2026
Stored XSS Vulnerability in LibreNMS: Impacting Authenticated Users via Graph Descriptions 4.8 medium 26.7.0 18 Aug 2026
Stored XSS Vulnerability in LibreNMS Package - CVSS Score 6.1 4.8 low 24.9.0 01 Oct 2024
CVE-2026-2728: LibreNMS Authenticated XSS Vulnerability on Showconfig Page 4.6 medium 26.3.0 13 Apr 2026
CVE-2025-23200: LibreNMS Stored XSS Vulnerability in Misc Section 4.6 medium 24.11.0 16 Jan 2025
CVE-2025-23199: LibreNMS Ports Stored Cross-site Scripting Vulnerability 4.6 medium 24.11.0 16 Jan 2025
CVE-2026-26989: Stored XSS Vulnerability in LibreNMS Alert Rule Creation 4.3 medium 26.2.0 18 Feb 2026
CVE-2025-68614: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability 4.3 medium 25.12.0 23 Dec 2025
CVE-2023-48294: Broken Access Control on Graphs Feature in LibreNMS 4.3 medium 23.11.0 17 Nov 2023
CVE-2025-62412: LibreNMS Alert Rules Cross-Site Scripting Vulnerability 3.8 low 25.10.0 16 Oct 2025
CVE-2025-65014: LibreNMS Weak Password Policy Vulnerability 3.7 low 25.11.0 18 Nov 2025
CVE-2024-47526: LibreNMS Self-XSS Vulnerability in Alert Templates Feature 3.5 low 24.9.0 01 Oct 2024
CVE-2025-47931: LibreNMS Stored XSS Vulnerability in Poller Group Name 2.1 low 25.5.0 19 May 2025
Critical Remote Code Execution Vulnerability in LibreNMS Package N/A high 26.3.0 13 Apr 2026
CVE-2026-26988: LibreNMS SQL Injection Vulnerability in IPv6 Address Search N/A high 26.2.0 18 Feb 2026
CVE-2025-62365: LibreNMS Reflected XSS Vulnerability in report_this Function N/A medium 25.7.0 13 Oct 2025

Looking for another version, or everything Vulert holds for librenms/librenms?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About librenms/librenms 23.9.1

Is librenms/librenms 23.9.1 vulnerable?

Yes. 63 vulnerabilities in the Vulert database cover librenms/librenms 23.9.1: 4 critical, 27 high, 27 medium and 5 low. Each entry above names the fixed version to move to.

How do I monitor librenms/librenms for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the librenms/librenms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.