PT-2026-20981 · Librenms · Librenms

·

CVE-2026-26987

·

Published

2026-02-18

·

Updated

2026-02-20

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions LibreNMS versions 25.12.0 and below
Description LibreNMS is a network monitoring tool susceptible to Reflected Cross-Site Scripting (XSS) attacks. The issue occurs through the email field. This impacts versions prior to 26.2.0.
Recommendations Update to version 26.2.0 or later.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-26987
GHSA-GQX7-99JW-6FPR

Affected Products

Librenms