Stored Cross-Site Scripting Vulnerability in LibreNMS Network Monitoring System

CVE-2025-55296

What is CVE-2025-55296?

In the LibreNMS network monitoring system, a stored Cross-Site Scripting (XSS) vulnerability is present in the Alert Template creation feature. This flaw allows unauthorized users, particularly those with admin privileges, to inject malicious JavaScript code. When the template is rendered, this injected code executes, potentially leading to the compromise of other admin accounts within the system. This vulnerability has been addressed in the latest release, version 25.8.0, highlighting the importance of updating to this version to protect against exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References