CVE-2025-62411

LibreNMS is a community-based GPL-licensed network monitoring system. LibreNMS <= 25.8.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Transports management functionality. When an administrator creates a new Alert Transport, the value of the Transport name field is stored and later rendered in the Transports column of the Alert Rules page without proper input validation or output encoding. This leads to arbitrary JavaScript execution in the admin’s browser. This vulnerability is fixed in 25.10.0.

• CWE-79

• https://github.com/librenms/librenms/commit/706a77085f4d5964f7de9444208ef707e1f79450Patch
• https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28wExploit, Vendor Advisory
• https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28wExploit, Vendor Advisory

Published

Oct 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-62406Piwigo is a full featured open source photo gallery applicat…8.8
• CVE-2025-62407Frappe is a full-stack web application framework. Prior to 1…6.1
• CVE-2025-62408c-ares is an asynchronous resolver library. Versions 1.32.3 …5.9
• CVE-2025-62409Envoy is a cloud-native, open source edge and service proxy.…7.5
• CVE-2025-6241LsiAgent.exe, a component of SysTrack from Lakeside Software…4.4
• CVE-2025-62410In versions before 20.0.2, it was found that --disallow-code…9.4
• CVE-2025-62412LibreNMS is a community-based GPL-licensed network monitori…4.8
• CVE-2025-62413MQTTX is an MQTT 5.0 desktop client and MQTT testing tool. A…6.1
• CVE-2025-62414Bagisto is an open source laravel eCommerce platform. In Bag…4.8
• CVE-2025-62415Bagisto is an open source laravel eCommerce platform. In Bag…4.8
• CVE-2025-62416Bagisto is an open source laravel eCommerce platform. Bagist…6.8
• CVE-2025-62417Bagisto is an open source laravel eCommerce platform. When p…7.8