L
Vendor security profile
librenms
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs15
Critical2
CISA KEV0
Public exploit10
Patch rate%13
Avg. CVSS7.2
12-month vulnerability rate
0
0
1
0
0
0
0
0
0
3
10
1
CVE KEV
CVE severity distribution
15toplam CVE
Critical2 (13%)
High7 (47%)
Medium6 (40%)
Patch and exploitation view
%13
Verified patch
%0
CISA KEV
%67
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
13Unknown
Latest vulnerabilities
5.3
CVE-2026-108715
LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
L
Patch status unknown
5.0
CVE-2020-15875
SQL injection in LibreNMS
L
Patch status unknownEPSS %0
8.7
CVE-2026-86427
LibreNMS before 26.8.0 Argument Injection via graph_title
L
Patch status unknownEPSS %1
9.8
CVE-2026-86426
Improper authentication in Librenms
L
Patch status unknownEPSS %4
8.6
CVE-2026-84194
LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
L
Patch status unknownEPSS %2
5.8
CVE-2026-84193
LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
L
Patch status unknownEPSS %0
7.1
CVE-2026-84192
LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data
L
Patch status unknownEPSS %0
5.3
CVE-2026-84191
LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields
L
Patch status unknownEPSS %0
8.7
CVE-2026-84190
LibreNMS before 26.5.0 Remote Code Execution via AboutController
L
Patch status unknownEPSS %1
9.2
CVE-2026-84189
LibreNMS before 26.7.0 Stored XSS via Oxidized API
L
Patch status unknownEPSS %0