Lansweeper — Vulnerabilities & Security Advisories 10

Lansweeper serves as an IT asset management solution, discovering and auditing network devices, software, and hardware. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and insecure default configurations. The product has faced multiple security incidents, including a 2020 RCE vulnerability (CVE-2020-10189) and a 2021 XSS issue (CVE-2021-32759), affecting its web interface. While these vulnerabilities have been addressed through patches, they highlight the risks associated with network scanning tools that maintain broad system access. Security researchers continue to identify potential weaknesses, emphasizing the need for regular updates and proper hardening of Lansweeper deployments in enterprise environments.