Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: librenms 26.8.0 Clear all filters
TI-2026-59135 CVE-2026-86427 · GHSA-j7jc-m6xg-rrcw

LibreNMS before 26.8.0 Argument Injection via graph_title

Priority MEDIUM 41

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00605 Published 2026-09-07 Fixed in 26.8.0 CWE-77
TI-2026-59134 CVE-2026-86426 · GHSA-84cr-xjpw-q9mc

LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

Priority HIGH 75

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.04358 Published 2026-09-07 Fixed in 26.8.0 CWE-287