CVE-2026-84191

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 26.5.0

Description Stored cross-site scripting occurs in VRF display pages when fields obtained via SNMP polling are rendered without proper sanitization. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP responses, which then executes in the browser of any user accessing VRF-related pages. The affected variables are mplsVpnVrfDescription, vrf name, and mplsVpnVrfRouteDistinguisher.

Recommendations Update to version 26.5.0 or later.