CVE-2025-65093

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajax_output.php endpoint. The hostname parameter is interpolated directly into an SQL query without proper sanitization or parameter binding, allowing an attacker to manipulate the query logic and infer data from the database through conditional responses. This issue has been patched in version 25.11.0.

• CWE-89

• https://github.com/librenms/librenms/security/advisories/GHSA-6pmj-xjxp-p8g9Exploit, Vendor Advisory
• https://github.com/librenms/librenms/security/advisories/GHSA-6pmj-xjxp-p8g9Exploit, Vendor Advisory

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65088An Out-of-Bounds Read vulnerability is present in Ashlar-Vel…7.8
• CVE-2025-65089XWiki Remote Macros provides XWiki rendering macros that are…6.5
• CVE-2025-6509A vulnerability was found in seaswalker spring-analysis up t…3.5
• CVE-2025-65090XWiki Full Calendar Macro displays objects from the wiki on …5.3
• CVE-2025-65091XWiki Full Calendar Macro displays objects from the wiki on …10
• CVE-2025-65092ESF-IDF is the Espressif Internet of Things (IOT) Developmen…6.9
• CVE-2025-65094WBCE CMS is a content management system. Prior to version 1.…8.8
• CVE-2025-65095Lookyloo is a web interface that allows users to capture a w…9.4
• CVE-2025-65096RomM (ROM Manager) allows users to scan, enrich, browse and …4.3
• CVE-2025-65097RomM (ROM Manager) allows users to scan, enrich, browse and …6.5
• CVE-2025-65098Typebot is an open-source chatbot builder. In versions prior…7.4
• CVE-2025-65099Claude Code is an agentic coding tool. Prior to version 1.0.…9.8