netbox
- Software type
- Network management
- Total vulnerabilities (90 days)
- 3
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/14/2026, netbox recorded 3 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of netbox and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-104073NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom LinksCVE-2026-86176NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIsCVE-2026-86175NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIsCVE-2026-29514NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-104073NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links | Exploitation statusNot exploited | FixYes | Published10/06/2026 | SeverityMedium |
CVE-2026-86176NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs | Exploitation statusActively exploited | FixYes | Published09/05/2026 | SeverityMedium |
CVE-2026-86175NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs | Exploitation statusActively exploited | FixYes | Published09/05/2026 | SeverityHigh |
CVE-2026-29514NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin | Exploitation statusActively exploited | FixYes | Published05/04/2026 | SeverityHigh |
4 Results | Page 1 of 1