CVE-2025-55296
Last modified
CVE-2025-55296 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the Alert Template creation feature. EPSS estimates a 0.82% chance of exploitation in the next 30 days.
Description
librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template is rendered, potentially compromising other admin accounts. This vulnerability is fixed in 25.8.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Librenms | Librenms | < 25.8.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-55296?
How severe is CVE-2025-55296?
How do I fix CVE-2025-55296?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-5529The Educenter theme for WordPress is vulnerable to Stored Cr…6.4
- CVE-2025-55291Shaarli is a minimalist bookmark manager and link sharing se…7.1
- CVE-2025-55292Meshtastic is an open source mesh networking solution. In th…8.2
- CVE-2025-55293Meshtastic is an open source mesh networking solution. Prior…9.8
- CVE-2025-55294screenshot-desktop allows capturing a screenshot of your loc…9.8
- CVE-2025-55295qBit Manage is a tool that helps manage tedious tasks in qBi…6.5
- CVE-2025-55297ESF-IDF is the Espressif Internet of Things (IOT) Developmen…8.8
- CVE-2025-55298ImageMagick is free and open-source software used for editin…8.8
- CVE-2025-55299VaulTLS is a modern solution for managing mTLS (mutual TLS) …9.4
- CVE-2025-5530The WPC Smart Compare for WooCommerce plugin for WordPress i…5.4
- CVE-2025-55300Komari is a lightweight, self-hosted server monitoring tool …8.6
- CVE-2025-55301The Scratch Channel is a news website. In version 1, it is p…6.7
Are you affected by CVE-2025-55296?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST