CVE-2025-68614

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject HTML code. This issue has been patched in version 25.12.0.

• CWE-79

• https://github.com/librenms/librenms/commit/ebe6c79bf4ce0afeb575c1285afe3934e44001f1Patch
• https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wjExploit, Vendor Advisory

Published

Dec 23, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-68606Exposure of Sensitive System Information to an Unauthorized …5.3
• CVE-2025-68607Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-68608Missing Authorization vulnerability in DeluxeThemes Userpro …7.5
• CVE-2025-68609A vulnerability in Palantir's Aries service allowed unauthen…6.6
• CVE-2025-6861A vulnerability was found in SourceCodester Best Salon Manag…8.8
• CVE-2025-68613n8n is an open source workflow automation platform. Versions…8.8
• CVE-2025-68615net-snmp is a SNMP application library, tools and daemon. Pr…9.8
• CVE-2025-68616WeasyPrint helps web developers to create PDF documents. Pri…7.5
• CVE-2025-68617FluidSynth is a software synthesizer based on the SoundFont …7
• CVE-2025-68618ImageMagick is free and open-source software used for editin…7.5
• CVE-2025-68619Signal K Server is a server application that runs on a centr…7.2
• CVE-2025-6862A vulnerability classified as critical has been found in Sou…8.8