netbox-community vulnerabilities
10 published CVEs name netbox-community among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116845
NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
netbox-community · netbox
Medium5.3 - CVE-2026-104073
NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
netbox-community · netbox
Medium6.9 - CVE-2026-55251
NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files
netbox-community · devicetype-library
Medium6.5 - CVE-2026-54918
NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI
netbox-community · devicetype-library
Medium5.3 - CVE-2026-54916
NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft
netbox-community · devicetype-library
High8.8 - CVE-2026-54752
NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request
netbox-community · devicetype-library
Critical9.6 - CVE-2026-86176
NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs
netbox-community · netbox
Medium5.3 - CVE-2026-86175
NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs
netbox-community · netbox
High7.1 - CVE-2026-29514
NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin
netbox-community · netbox
High8.7 - CVE-2023-27573
netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567…
netbox-community · netbox-docker
Critical9.0