VULNERABILITY INTELLIGENCE

CVE-2025-55296

CVSS score5.5 MEDIUM
EPSS probability17.04%
CISA KEVNot currently listed
Published2025-08-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Description

librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template is rendered, potentially compromising other admin accounts. This vulnerability is fixed in 25.8.0.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references