PT-2025-52726 · Librenms · Librenms

Zdi-Disclosures · Published 2025-12-22 · Updated 2026-01-02 · CVE-2025-68614

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 25.12.0

Description LibreNMS, an auto-discovering PHP/MySQL/SNMP based network monitoring tool, contains a stored cross-site scripting issue in the Alert Rule API. The alert rule name is not properly sanitized, allowing injection of HTML code when creating or updating alert rules via the LibreNMS API. The vulnerable API endpoint is used for creating and updating alert rules. The alert rule name is the vulnerable parameter.

Recommendations Update to version 25.12.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-68614

GHSA-C89F-8G7G-59WJ

ZDI-25-1182

Affected Products

Librenms

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68614.json · Exploit
• https://github.com/librenms/librenms/commit/ebe6c79bf4ce0afeb575c1285afe3934e44001f1 · Patch
• https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-1182 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68614 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68614 · Vendor Advisory
• https://t.me/CVEtracker/40458 · Telegram Post
• https://t.me/cveNotify/147571 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1pw544r/resumen_diario_de_vulnerabilidades_26122025 · Reddit Post
• https://twitter.com/VulmonFeeds/status/2003349788280999973 · Twitter Post
• https://twitter.com/dailycve/status/2003628271968416218 · Twitter Post
• https://twitter.com/CVEnew/status/2003272596184543741 · Twitter Post