Skip to content
Threat Feed
Subscribe

Tag

Librenms

3 briefs RSS
high advisory

Remote Code Execution in LibreNMS Signal Alert Transport Module

An authenticated administrator can execute arbitrary code on LibreNMS servers by injecting commands into the Signal Alert Transport configuration fields, triggering unsafe system exec calls.

LibreNMS +1 xss web-vulnerability
3t
medium threat

LibreNMS Multiple XSS Vulnerabilities

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in LibreNMS versions 25.12.0 to before 26.3.0, allowing an attacker to inject malicious code into a user's browser session.

LibreNMS xss reflected-xss
2r 1t
high advisory

LibreNMS Remote Code Execution via Arbitrary File Write

An authenticated administrator can achieve remote code execution on LibreNMS by modifying the binary path settings for built-in network tools and bypassing an input filter to execute arbitrary commands.

LibreNMS rce web-application
2r 1t 1i