Stored Cross-Site Scripting Vulnerability in LibreNMS Network Monitoring System

CVE-2025-62411

What is CVE-2025-62411?

LibreNMS, a GPL-licensed community network monitoring system, is susceptible to a Stored Cross-Site Scripting vulnerability in its Alert Transports management functionality. When administrators create new Alert Transports, the value entered in the Transport name field is improperly validated and rendered in the Alert Rules page. This oversight allows for arbitrary JavaScript code execution in the browser of the admin user, significantly compromising the system's security. Users are advised to upgrade to version 25.10.0, where this vulnerability has been addressed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References