Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

LibreNMS Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-86427`LibreNMS before 26.8.0 Argument Injection via graph_title	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published09/07/2026	SeverityHigh
`CVE-2026-86426`LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published09/07/2026	SeverityCritical
`CVE-2026-84194`LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published09/01/2026	SeverityHigh
`CVE-2026-84193`LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published09/01/2026	SeverityMedium
`CVE-2026-84192`LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published09/01/2026	SeverityHigh
`CVE-2026-84191`LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published09/01/2026	SeverityMedium
`CVE-2026-84190`LibreNMS before 26.5.0 Remote Code Execution via AboutController	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published09/01/2026	SeverityHigh
`CVE-2026-84189`LibreNMS before 26.7.0 Stored XSS via Oxidized API	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published09/01/2026	SeverityCritical
`CVE-2026-84188`librenms before 26.7.0 Stored XSS via graph_descr settings	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published09/01/2026	SeverityMedium
`CVE-2026-55182`LibreNMS: Remote Code Execution by Signal Alert Transportation Module	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published08/26/2026	SeverityHigh
`CVE-2026-45694`LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published08/26/2026	SeverityMedium
`CVE-2026-80214`LibreNMS Virtualisation Discovery Module RCE	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published08/26/2026	SeverityHigh
`CVE-2024-51092`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published05/08/2026	SeverityCritical
`CVE-2026-6204`	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published04/13/2026	SeverityHigh
`CVE-2026-2728`	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published04/13/2026	SeverityMedium
`CVE-2026-26992`LibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups name	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published02/20/2026	SeverityMedium
`CVE-2026-26991`LibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups name	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published02/20/2026	SeverityMedium
`CVE-2026-27016`LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published02/20/2026	SeverityMedium
`CVE-2026-26990`LibreNMS has Time-Based Blind SQL Injection in address-search.inc.php	Exploitation statusNot known exploited	FixNot confirmed	Affected productLibreNMS	Published02/20/2026	SeverityHigh
`CVE-2026-26989`LibreNMS has Stored XSS in Alert Rule	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published02/20/2026	SeverityMedium
`CVE-2026-26988`LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published02/20/2026	SeverityCritical
`CVE-2026-26987`LibreNMS affected by reflected XSS via email field	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published02/20/2026	SeverityMedium
`CVE-2020-36947`LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published01/27/2026	SeverityHigh
`CVE-2025-68614`LibreNMS Alert Rule API Cross-Site Scripting Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published12/22/2025	SeverityMedium
`CVE-2025-65093`LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/18/2025	SeverityMedium
`CVE-2025-65014`LibreNMS has Weak Password Policy	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/18/2025	SeverityLow
`CVE-2025-65013`LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/18/2025	SeverityMedium
`CVE-2025-62412`LibreNMS alert-rules Cross-Site Scripting Vulnerability	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/16/2025	SeverityLow
`CVE-2025-62411`Stored XSS in Alert Transport name field in LibreNMS	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/16/2025	SeverityMedium
`CVE-2025-62365`LibreNMS vulnerable to Reflected-XSS in `report_this` function	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/13/2025	SeverityMedium
`CVE-2025-55296`LibreNMS allows stored XSS in Alert Template name field	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published08/18/2025	SeverityMedium
`CVE-2025-54138`LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE	Exploitation statusNot known exploited	FixYes	Affected productLibreNMS	Published07/22/2025	SeverityHigh
`CVE-2025-47931`LibreNMS stored Cross-site Scripting vulnerability in poller group name	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published05/17/2025	SeverityLow
`CVE-2024-56144`Stored XSS-LibreNMS-Display Name 2 in librenms	Exploitation statusNot known exploited	FixNot confirmed	Affected productLibreNMS	Published01/16/2025	SeverityMedium
`CVE-2025-23198`Stored-XSS-LibreNMS-Display-Name in librenms	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published01/16/2025	SeverityMedium
`CVE-2025-23199`Stored XSS-LibreNMS-Ports in librenms	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published01/16/2025	SeverityMedium
`CVE-2025-23200`Stored XSS-LibreNMS-Misc Section in librenms	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published01/16/2025	SeverityMedium
`CVE-2025-23201`Reflected Cross-site Scripting on error alert in librenms	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published01/16/2025	SeverityMedium
`CVE-2024-53457`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published12/05/2024	SeverityMedium
`CVE-2024-52526`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-51497`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-51496`LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-51495`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-51494`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-50355`LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-50352`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-50351`LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-50350`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-49764`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-49759`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-49758`LibreNMS has a stored XSS in ExamplePlugin with Device's Notes	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityMedium
`CVE-2024-49754`LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published11/15/2024	SeverityHigh
`CVE-2024-47523`LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/01/2024	SeverityHigh
`CVE-2024-47524`LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/01/2024	SeverityHigh
`CVE-2024-47525`Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/01/2024	SeverityHigh
`CVE-2024-47526`LibreNMS has a Self-XSS ('Cross-site Scripting') in librenms/includes/html/modal/alert_template.inc.php	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published10/01/2024	SeverityLow
`CVE-2024-47527`LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/01/2024	SeverityHigh
`CVE-2024-47528`LibreNMS Contains a Stored XSS via File Upload	Exploitation statusPublic exploit	FixYes	Affected productLibreNMS	Published10/01/2024	SeverityMedium
`CVE-2024-32480`LibreNMS's Time-Based Blind SQL injection leads to database extraction	Exploitation statusNot known exploited	FixNot confirmed	Affected productLibreNMS	Published04/22/2024	SeverityHigh
`CVE-2024-32479`LibreNMS's Improper Sanitization on Service template name leads to Stored XSS	Exploitation statusNot known exploited	FixNot confirmed	Affected productLibreNMS	Published04/22/2024	SeverityHigh
`CVE-2024-32461`LibreNMS vulnerable to time-based SQL injection that leads to database extraction	Exploitation statusNot known exploited	FixNot confirmed	Affected productLibreNMS	Published04/22/2024	SeverityHigh
`CVE-2023-46745`Rate limiting Bypass on login page in libreNMS	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published11/17/2023	SeverityMedium
`CVE-2023-48294`Broken Access control on Graphs Feature in LibreNMS	Exploitation statusNot confirmed	FixNot confirmed	Affected productLibreNMS	Published11/17/2023	SeverityMedium
`CVE-2023-48295`Cross-site Scripting at Device groups Deletion feature in LibreNMS	Exploitation statusPublic exploit	FixNot confirmed	Affected productLibreNMS	Published11/17/2023	SeverityMedium
`CVE-2023-5591`SQL Injection in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published10/16/2023	SeverityHigh
`CVE-2023-5060`Cross-site Scripting (XSS) - DOM in librenms/librenms	Exploitation statusNot known exploited	FixYes	Affected productlibrenms/librenms	Published09/19/2023	SeverityHigh
`CVE-2023-4982`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusNot known exploited	FixYes	Affected productlibrenms/librenms	Published09/15/2023	SeverityCritical
`CVE-2023-4981`Cross-site Scripting (XSS) - DOM in librenms/librenms	Exploitation statusNot known exploited	FixYes	Affected productlibrenms/librenms	Published09/15/2023	SeverityHigh
`CVE-2023-4980`Cross-site Scripting (XSS) - Generic in librenms/librenms	Exploitation statusNot known exploited	FixYes	Affected productlibrenms/librenms	Published09/15/2023	SeverityHigh
`CVE-2023-4978`Cross-site Scripting (XSS) - DOM in librenms/librenms	Exploitation statusNot known exploited	FixYes	Affected productlibrenms/librenms	Published09/15/2023	SeverityCritical
`CVE-2023-4979`Cross-site Scripting (XSS) - Reflected in librenms/librenms	Exploitation statusNot known exploited	FixYes	Affected productlibrenms/librenms	Published09/15/2023	SeverityHigh
`CVE-2023-4977`Code Injection in librenms/librenms	Exploitation statusNot known exploited	FixYes	Affected productlibrenms/librenms	Published09/15/2023	SeverityHigh
`CVE-2023-4347`Cross-site Scripting (XSS) - Reflected in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published08/15/2023	SeverityHigh
`CVE-2022-3561`Cross-site Scripting (XSS) - Generic in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityMedium
`CVE-2022-4067`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityLow
`CVE-2022-4069`Cross-site Scripting (XSS) - Generic in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityLow
`CVE-2022-4068`Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityHigh
`CVE-2022-3516`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityMedium
`CVE-2022-4070`Insufficient Session Expiration in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityLow
`CVE-2022-3562`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityMedium
`CVE-2022-3525`Deserialization of Untrusted Data in librenms/librenms	Exploitation statusPublic exploit	FixYes	Affected productlibrenms/librenms	Published11/20/2022	SeverityCritical
`CVE-2022-3231`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published09/17/2022	SeverityMedium
`CVE-2022-36745`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/30/2022	SeverityUnknown
`CVE-2022-36746`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/30/2022	SeverityUnknown
`CVE-2022-29712`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/31/2022	SeverityUnknown
`CVE-2022-29711`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/31/2022	SeverityUnknown
`CVE-2022-0772`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published02/27/2022	SeverityMedium
`CVE-2022-0589`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published02/15/2022	SeverityMedium
`CVE-2022-0588`Missing Authorization in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published02/15/2022	SeverityHigh
`CVE-2022-0587`Improper Authorization in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published02/15/2022	SeverityHigh
`CVE-2022-0580`Incorrect Authorization in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published02/14/2022	SeverityHigh
`CVE-2022-0575`Cross-site Scripting (XSS) - Stored in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published02/13/2022	SeverityMedium
`CVE-2022-0576`Cross-site Scripting (XSS) - Generic in librenms/librenms	Exploitation statusNot confirmed	FixYes	Affected productlibrenms/librenms	Published02/13/2022	SeverityMedium
`CVE-2021-44278`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published12/03/2021	SeverityUnknown
`CVE-2021-44277`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published12/01/2021	SeverityUnknown
`CVE-2021-44279`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published12/01/2021	SeverityUnknown
`CVE-2021-43324`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/03/2021	SeverityUnknown
`CVE-2021-31274`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/08/2021	SeverityUnknown
`CVE-2020-35700`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published02/08/2021	SeverityUnknown
`CVE-2020-15877`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published07/21/2020	SeverityUnknown

100 / 116 Results

Security vulnerabilities from LibreNMS

LibreNMS

How many security vulnerabilities does LibreNMS have?

Which LibreNMS product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular LibreNMS products

LibreNMS

librenms/librenms