Netbox-Community

7 CVEs across 3 Netbox-Community products. Browse Netbox-Community vulnerabilities, severities, and proof-of-concept exploits.

Netbox-Community products with known CVEs

ProductCVEs
Devicetype-Library3
Netbox3
Netbox-Docker1
Netbox-Community CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54918Medium5.32026-09-17NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOX_DT…
CVE-2026-54916High8.82026-09-17NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --…
CVE-2026-54752Critical9.62026-09-17NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pul…
CVE-2026-86176Medium4.32026-09-05NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authentica…
CVE-2026-86175Medium6.52026-09-05NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission…
CVE-2026-29514High8.82026-05-04NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authen…
CVE-2023-27573Critical9.02026-03-11netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567…