CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.

• CWE-22

• https://github.com/librenms/librenms/pull/13554Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/librenms/librenms/pull/13554Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Dec 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44263Gurock TestRail before 7.2.4 mishandles HTML escaping.5.4
• CVE-2021-44266GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS …6.1
• CVE-2021-44269An out of bounds read was found in Wavpack 5.4.0 in processi…5.5
• CVE-2021-4427The Vuukle Comments, Reactions, Share Bar, Revenue plugin fo…4.3
• CVE-2021-44273e2guardian v5.4.x <= v5.4.3r is affected by missing SSL cert…7.4
• CVE-2021-44277Librenms 21.11.0 is affected by a Cross Site Scripting (XSS)…6.1
• CVE-2021-44279Librenms 21.11.0 is affected by a Cross Site Scripting (XSS)…6.1
• CVE-2021-4428A vulnerability has been found in what3words Autosuggest Plu…7.5
• CVE-2021-44280attendance management system 1.0 is affected by a SQL inject…9.8
• CVE-2021-44283A buffer overflow in the component /Enclave.cpp of Electroni…7.5
• CVE-2021-44299A reflected cross-site scripting (XSS) vulnerability in \lib…5.4
• CVE-2021-4430A vulnerability classified as problematic has been found in …7.5