CVE-2024-47526: Librenms

Low severity, CVSS 2.4. EPSS: 0.5% chance of exploitation in the next 30 days.

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulnerability in the "Alert Templates" feature allows users to inject arbitrary JavaScript into the alert template's name. This script executes immediately upon submission but does not persist after a page refresh.

Affected products

• Librenms Librenms: before 24.9.0 (fixed in 24.9.0)

Published 2024-10-01. Last modified 2026-06-17.