Vendor

    Netbox-community

    9 known vulnerabilities in products by Netbox-community, 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Netbox-community
    CriticalCVE-2026-54752

    Netbox-community Devicetype-library: Deserialization of Untrusted Data

    		9.6
    HighCVE-2026-54916

    Netbox-community Devicetype-library: Uncontrolled Search Path Element

    		8.8
    HighCVE-2026-29514

    NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin

    		8.8
    HighCVE-2026-104073

    NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

    also in 1 other product

    		7.6
    CriticalCVE-2023-27573

    Netbox-community Netbox-docker: Use of Default Credentials

    		9.0
    HighCVE-2026-86175

    NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

    		6.5
    MediumCVE-2026-54918

    Netbox-community Devicetype-library: External Control of System or Configuration Setting

    		5.3
    MediumCVE-2026-55251

    Netbox-community Devicetype-library: Code Injection

    		6.5
    MediumCVE-2026-86176

    NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs

    		4.3

    Products

    Products by Netbox-community
    Devicetype-library40
    Netbox40