https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T11:14:14.127846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-55296 CVE-2025-55296 — LibreNMS allows stored XSS in Alert Template name field 2026-10-27T11:14:14.128955+00:00

Affected: librenms

librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template is rendered, potentially compromising other admin accounts. This vulnerability is fixed in 25.8.0.