CVE-2026-27016

MEDIUM EPSS 13.4%
Published Feb 20, 20264mo ago · Modified Jun 17, 20262w ago
5.4 CVSS 3.1
Medium
Find Similar
Published Feb 20, 2026 4mo ago
Last Modified Jun 17, 2026 2w ago

Description

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The Custom OID functionality lacks strip_tags() sanitization while other fields (name, oid, datatype) are sanitized. The unsanitized value is stored in the database and rendered without HTML escaping. This issue is fixed in version 26.2.0.

CVSS Details

Base Score
5.4
Exploitability
2.3
Impact
2.7
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction Required
Scope Changed
Confidentiality Low
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
13.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 2

CWE-116
CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
librenmslibrenms*≥24.10.0  –  <26.2.0

References 4

  • github.com https://github.com/librenms/librenms/commit/3bea263e02441690c01dea7fa3fe6ffec94af335
    Patch
  • github.com https://github.com/librenms/librenms/pull/19040
    Issue Tracking
  • github.com https://github.com/librenms/librenms/releases/tag/26.2.0
    ProductRelease Notes
  • github.com https://github.com/librenms/librenms/security/advisories/GHSA-fqx6-693c-f55g
    Third Party Advisory

Remediation

  • github.com https://github.com/librenms/librenms/commit/3bea263e02441690c01dea7fa3fe6ffec94af335
    Patch