Skip to main content

Vendor/product archive

networktocode / nautobot CVEs

Beta · best-effort

17 CVEs tagged to networktocode / nautobot0 Critical, 7 High, 6 Medium, 4 Low, 0 Unrated.

CVE-2026-44798

Published May 28, 2026

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use the REST API to…

CVSS 7.1 · High
evidence mentions
5
Buzz score
22.9
Vendor/product tagsBeta · best-effort

CVE-2026-44797

Published May 28, 2026

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook data model and associated feature set could be configured by u…

CVSS 8.5 · High
evidence mentions
5
Buzz score
22.9
Vendor/product tagsBeta · best-effort

CVE-2026-44796

Published May 28, 2026

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints (for example, /dcim/interfaces/rename/)…

CVSS 6.5 · Medium
evidence mentions
5
Buzz score
22.9
Vendor/product tagsBeta · best-effort

CVE-2026-44794

Published May 28, 2026

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, in the case of inter-object references via GenericForeignKey (a pattern allowing…

CVSS 5.4 · Medium
evidence mentions
5
Buzz score
22.9
Vendor/product tagsBeta · best-effort

CVE-2026-34203

Published Mar 31, 2026

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password…

CVSS 2.7 · Low
evidence mentions
5
Buzz score
22.9
Vendor/product tagsBeta · best-effort

CVE-2025-49143

Published Jun 10, 2025

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to v2.4.10 and v1.6.32 , files uploaded by users to Nautobot's MEDIA_ROOT directory, including DeviceT…

CVSS 6.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-49142

Published Jun 10, 2025

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insuffici…

CVSS 6.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-36112

Published May 28, 2024

Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dy…

CVSS 6.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-34707

Published May 14, 2024

Nautobot is a Network Source of Truth and Network Automation Platform. A Nautobot user with admin privileges can modify the `BANNER_TOP`, `BANNER_BOTTOM`, and `BANNER_LOGIN` confi…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2024-32979

Published May 1, 2024

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. It was disco…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2024-29199

Published Mar 26, 2024

Nautobot is a Network Source of Truth and Network Automation Platform. A number of Nautobot URL endpoints were found to be improperly accessible to unauthenticated (anonymous) use…

CVSS 3.7 · Low
Vendor/product tagsBeta · best-effort

CVE-2024-23345

Published Jan 23, 2024

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application. All users of Nautobot versions earlier than 1.6.10 or 2.1.2 are potentially impa…

CVSS 7.1 · High
Vendor/product tagsBeta · best-effort

CVE-2023-51649

Published Dec 22, 2023

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. When submitt…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-50263

Published Dec 12, 2023

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot…

CVSS 3.7 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-48705

Published Nov 22, 2023

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application All users of Nautobot versions earlier than 1.6.6 or 2.0.5 are potentially affecte…

CVSS 7.1 · High
Vendor/product tagsBeta · best-effort

CVE-2023-46128

Published Oct 25, 2023

Nautobot is a Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 2.0.x, certain REST API endp…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25657

Published Feb 21, 2023

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nau…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-17 of 17 CVEsPage 1 of 1