shouldiuse.io

VERDICT

Should I use LibreNMS?

LibreNMS is an autodiscovering PHP/MySQL-based network monitoring system. - librenms.org

Depends. Buy if you're a network-savvy team or MSP wanting free SNMP device monitoring and can self-host and patch fast. Skip if you want hosted turnkey monitoring, Windows/cloud coverage, or vendor support.

Confidence

Medium. Based on 30+ public sources; many review snippets were truncated, so verbatim quotes were withheld rather than paraphrased.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Community (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • MSPs monitoring many customer networks
  • Network engineers wanting SNMP device polling
  • Budget-constrained teams comfortable self-hosting
  • Homelab and lab environments

Not for

  • Teams wanting hosted, turnkey monitoring with vendor support
  • Windows/cloud-first shops needing app-level monitoring
  • Orgs that can't patch frequently — steady CVE stream
  • Small teams needing only simple up/down checks

Gotchas - check before you buy

high

SonarSource demonstrated code execution via SNMP traps; run current releases only.

medium

No vendor SLA — support is community forums; expect to troubleshoot yourself.

medium

Weak default password policy vulnerability (CVE-2025-65014); tighten settings yourself.

medium

Larger installs show slowdowns and 504 errors in community reports.

Pros and cons

Pros

  • Completely free and open source under GPL
  • Auto-discovers network devices, cutting manual setup
  • Broad SNMP device support across vendors
  • Flexible alerting via email, Telegram, Line Notify
  • Proven at scale, including Wikimedia's operations

Cons

  • Recurring CVEs: reflected/stored XSS, SQL injection, SNMP-trap RCE
  • Windows and cloud monitoring have gaps
  • Five-minute polling misses short traffic spikes
  • Self-hosted: you own installation, tuning, and patching
  • Users report it's less efficient than some alternatives

Sources & method

Analyzed 9/24/2026 - 12 sources - Actively maintained open-source project, but with a steady CVE stream — including RCE — so fast patching is mandatory.

official x4review x5security x3
  • SNMP trap code execution, SonarSource researchers gained code execution through the SNMP trap handler.
  • CVE-2026-26990 — SQL injection, Time-based SQL injection vulnerability disclosed.
  • CVE-2026-26987 / CVE-2025-47931 — XSS, Reflected and stored cross-site scripting vulnerabilities disclosed.
  • CVE-2025-65014 — weak password policy, LibreNMS shipped a weak password policy, flagged in a GitHub advisory.

Key stats

  • Value for money: 5/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 5/5. Free and fully open source, GPL-licensed.
  • Ease of use: 2/5. Self-installed PHP/MySQL stack; setup and tuning take work.
  • Feature depth: 4/5. Autodiscovery, broad SNMP support, alerting, API, interface parsing.
  • Support quality: 2/5. Community forums only; no vendor, no SLA.
  • Security posture: 2/5. Recurring CVEs: XSS, SQL injection, SNMP-trap RCE.
  • $0 Starting price GPL, fully self-hosted
  • Yes Free tier 100% open source, no paid edition
  • 835 Companies using it per TheirStack adoption data
  • 16 G2 reviews small review base for its scale

Pricing

Community (self-hosted)

$0

  • Full monitoring platform, GPL-licensed
  • Community forum support only
  • Funded via OpenCollective donations

Security

Actively maintained open-source project, but with a steady CVE stream — including RCE — so fast patching is mandatory.

  • SNMP trap code executionSonarSource researchers gained code execution through the SNMP trap handler.⁵
  • CVE-2026-26990 — SQL injectionTime-based SQL injection vulnerability disclosed.⁶
  • CVE-2026-26987 / CVE-2025-47931 — XSSReflected and stored cross-site scripting vulnerabilities disclosed.
  • CVE-2025-65014 — weak password policyLibreNMS shipped a weak password policy, flagged in a GitHub advisory.⁷

What users say

Network admins praise LibreNMS's free autodiscovery and value, but report Windows/cloud gaps, efficiency complaints, and frequent patching demands.

Alternatives

Compare LibreNMS with each alternative.

  • Nagios XI

    Commercial alternative with vendor support, at a price.

Companies that use it

  • Wikimedia Foundation10
  • EdgeUno
  • RemoteWinBox
Full analysis

Based on 30+ public sources; many review snippets were truncated, so verbatim quotes were withheld rather than paraphrased.

Free, capable network monitor for hands-on teams — but you own the hosting, the patching, and the CVE treadmill.

Methodology

Based on 30+ public sources; many review snippets were truncated, so verbatim quotes were withheld rather than paraphrased.

Sources

  1. Opinions on LibreNMS? — r/networkingreddit.com
    review
  2. LibreNMS Review for MSPs — OpenMSPopenmsp.ai
    review
  3. LibreNMS Reviews — G2g2.com
    review
  4. Netdata vs LibreNMSnetdata.cloud
    review
  5. It's a (SNMP) Trap — SonarSourcesonarsource.com
    security
  6. CVE-2026-26990 — SQL Injectionsentinelone.com
    security
  7. CVE-2025-65014 — Weak Password Policygithub.com
    security
  8. librenms/librenms — GitHubgithub.com
    official
  9. Installing LibreNMS — Docsdocs.librenms.org
    official
  10. wikimedia/operations-software-librenmsgithub.com
    official
  11. LibreNMS on OpenCollectiveopencollective.com
    official
  12. Missing pieces in LibreNMS monitoring — r/LibreNMSreddit.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.