Vulnerabilities

CVSS

4.6 Medium

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Risk score

36.8

Published

2026-04-13

Status

Published

LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploitation requires administrative privileges. Exploitation could result in XSS attacks being performed against other users with access to the page.

Weaknesses

CWE-79

Coverage 1

vulnerability

Vulnérabilité dans LibreNMS (12 mai 2026)

A vulnerability in LibreNMS allows for remote code injection via cross-site scripting (XSS). This affects versions prior to 26.3.0, potentially enabling attackers to execute malicious code on vulnerable systems. Users ar…

CERT-FR · May 12, 2026 Medium

CVE-2026-2728xssvulnerabilityremote

All articles mentioning it

Advisories and references

• projectblack.io/blog/librenms-authenticated-rce-and-xss/#xss-on-show...