VulertSecurity VulertSecurity

Vulnerability Database · Packagist · librenms/librenms · Version

librenms/librenms 25.9.0

25.9.0 is affected by 30 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 3 High 9 Medium 16 Low 2 Unrated 0

All librenms/librenms versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

librenms/librenms 25.9.0 vulnerabilities

30 vulnerabilities cover librenms/librenms 25.9.0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2019-10665: LibreNMS Information Disclosure 9.8 critical No fix published 24 May 2022
CVE-2018-20434: LibreNMS arbitrary OS commands execution 9.8 critical No fix published 24 May 2022
CVE-2021-44278: Path traversal vulnerability in librenms/librenms 9.8 critical No fix published 10 Dec 2021
CVE-2026-26990: LibreNMS Time-Based Blind SQL Injection Vulnerability 8.8 high 26.2.0 18 Feb 2026
CVE-2022-3525: Deserialization of Untrusted Data in librenms/librenms 8.8 high No fix published 20 Nov 2022
CVE-2026-55182: LibreNMS Remote Code Execution Vulnerability via Signal Alert Transport Module 8.6 high 26.5.0 18 Aug 2026
Persistent XSS Vulnerability in LibreNMS via Oxidized API Integration 8.1 high 26.7.0 18 Aug 2026
Remote Code Execution Vulnerability in LibreNMS: Arbitrary File Write Risk 7.6 high 26.3.0 26 Mar 2026
Stored XSS Vulnerability in LibreNMS via SNMP/Syslog Data 7.1 high 26.5.0 26 Aug 2026
CVE-2020-36947: LibreNMS Authenticated SQL Injection Vulnerability 7.1 high No fix published 27 Jan 2026
Remote Code Execution Vulnerability in LibreNMS 26.3.1 via AboutController 6.4 medium 26.5.0 18 Aug 2026
CVE-2025-65013: LibreNMS Reflected XSS Vulnerability in Node Image Parameter 6.2 medium 25.11.0 18 Nov 2025
CVE-2021-44279: Cross-site Scripting in LibreNMS 6.1 medium No fix published 03 Dec 2021
CVE-2021-44277: Cross-site Scripting in LibreNMS 6.1 medium No fix published 03 Dec 2021
CVE-2017-16759: LibreNMS Arbitrary File Read 5.9 medium 2017-08-18 13 May 2022
CVE-2025-65093: LibreNMS SQL Injection Vulnerability in ajax_output.php 5.5 medium No fix published 18 Nov 2025
CVE-2025-62411: Stored XSS Vulnerability in LibreNMS Alert Transport Name Field 5.5 medium 25.10.0 16 Oct 2025
CVE-2026-45694: LibreNMS Reflected XSS via Proxmox Instance/VMID GET Parameters 5.4 medium 26.5.0 12 Aug 2026
CVE-2026-27016: LibreNMS Stored XSS Vulnerability in Custom OID Unit Parameter 5.4 medium 26.2.0 18 Feb 2026
CVE-2026-26987: LibreNMS Reflected XSS Vulnerability via Email Field 5.3 medium 26.2.0 18 Feb 2026
CVE-2026-26992: LibreNMS Stored Cross-Site Scripting Vulnerability in Port Groups 5.1 medium 26.2.0 18 Feb 2026
CVE-2026-26991: LibreNMS Device Groups Name Stored Cross-Site Scripting Vulnerability 5.1 medium 26.2.0 18 Feb 2026
Stored XSS Vulnerability in LibreNMS: Impacting Authenticated Users via Graph Descriptions 4.8 medium 26.7.0 18 Aug 2026
CVE-2026-2728: LibreNMS Authenticated XSS Vulnerability on Showconfig Page 4.6 medium 26.3.0 13 Apr 2026
CVE-2026-26989: Stored XSS Vulnerability in LibreNMS Alert Rule Creation 4.3 medium 26.2.0 18 Feb 2026
CVE-2025-68614: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability 4.3 medium 25.12.0 23 Dec 2025
CVE-2025-62412: LibreNMS Alert Rules Cross-Site Scripting Vulnerability 3.8 low 25.10.0 16 Oct 2025
CVE-2025-65014: LibreNMS Weak Password Policy Vulnerability 3.7 low 25.11.0 18 Nov 2025
Critical Remote Code Execution Vulnerability in LibreNMS Package N/A high 26.3.0 13 Apr 2026
CVE-2026-26988: LibreNMS SQL Injection Vulnerability in IPv6 Address Search N/A high 26.2.0 18 Feb 2026

Looking for another version, or everything Vulert holds for librenms/librenms?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About librenms/librenms 25.9.0

Is librenms/librenms 25.9.0 vulnerable?

Yes. 30 vulnerabilities in the Vulert database cover librenms/librenms 25.9.0: 3 critical, 9 high, 16 medium and 2 low. Each entry above names the fixed version to move to.

How do I monitor librenms/librenms for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the librenms/librenms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.