CVE-2025-68614: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Please find POC file here https://trendmicro-my.sharepoint.com/:u:/p/kholoud_altookhy/IQCfcnOE5ykQSb6Fm-HFI872AZ_zeIJxU-3aDk0jh_eX_NE?e=zkN76d

ZDI-CAN-28575: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

– CVSS —————————————–

4.3: AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

– ABSTRACT ————————————-

Trend Micro’s Zero Day Initiative has identified a vulnerability affecting the following products: LibreNMS - LibreNMS

– VULNERABILITY DETAILS ————————

• Version tested: 25.10.0
• Installer file: NA
• Platform tested: NA