Weak Password Policy in LibreNMS Network Monitoring Tool by LibreNMS
CVE-2025-65014

3.7LOW

Key Information:

Vendor

Librenms

Status
Librenms
Vendor
CVE Published:
18 November 2025

What is CVE-2025-65014?

A vulnerability in the user management functionality of LibreNMS, a PHP/MySQL/SNMP based network monitoring tool, permits the creation of user accounts with unnecessarily weak and easily guessable passwords. This lack of a robust password policy significantly heightens the risk of unauthorized access through brute-force and credential stuffing attacks. Users are strongly urged to update to version 25.11.0 or later to mitigate this security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

librenms < 25.11.0

References

https://github.com/librenms/librenms/security/advisories/...
x_refsource_CONFIRM

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.