Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: librenms 26.3.0 Clear all filters
TI-2026-05445 CVE-2026-6204 · GHSA-pr3g-phhr-h8fh

OS command injection in librenms

Priority HIGH 72

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.07533 Published 2026-04-13 Fixed in 26.3.0 CWE-78
TI-2026-02335 CVE-2026-2728 · GHSA-5gm9-622f-qcg5

Cross-site scripting in librenms

Priority MEDIUM 54

LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page.

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00225 Published 2026-04-13 Fixed in 26.3.0 CWE-79