Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: librenms 26.5.0 Clear all filters
TI-2026-57887 CVE-2026-84191 · GHSA-3cvh-rhc6-7rhc

LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields

Priority LOW 30

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf_name, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanit…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00263 Published 2026-09-01 Fixed in 26.5.0 CWE-79
TI-2026-57886 CVE-2026-84190 · GHSA-p7jp-qp65-h4xf

LibreNMS before 26.5.0 Remote Code Execution via AboutController

Priority HIGH 73

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell_exec() without proper validation.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00863 Published 2026-09-01 Fixed in 26.5.0 CWE-77