File and Path Handling

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.CVE-2017-16759Librenms · 2.2% likely

   CWE-22

2. An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /pdf.php file with a partial filename in the report paramete…CVE-2019-12464Librenms · 2.2% likely

   CWE-22

3. Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.CVE-2021-44278Librenms · 1.5% likely

   CWE-22

4. LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCECVE-2025-54138librenms · CVSS 7.5 · 1.2% likely

   CWE-98

5. LibreNMS before 26.9.0 Path Traversal via NFSen channel ParameterCVE-2026-109354librenms · CVSS 4.3 · 0.3% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.