Weak Password Policy in LibreNMS Network Monitoring Tool by LibreNMS

CVE-2025-65014

What is CVE-2025-65014?

A vulnerability in the user management functionality of LibreNMS, a PHP/MySQL/SNMP based network monitoring tool, permits the creation of user accounts with unnecessarily weak and easily guessable passwords. This lack of a robust password policy significantly heightens the risk of unauthorized access through brute-force and credential stuffing attacks. Users are strongly urged to update to version 25.11.0 or later to mitigate this security risk.

References