CVE-2026-26989 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are affected by a Stored Cross-Site Scripting (XSS) vul…
Medium CVSS: 4.3

CVE-2026-26989

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Rules workflow. An attacker with administrative privileges can inject malicious scripts that execute in the browser context of any user who accesses the Alert Rules page. This issue has been fixed in version 26.2.0.
Vendor
Librenms
Product
Librenms
CWE
CWE-79
Yayın Tarihi
2026-02-20 02:16:54
Güncelleme
2026-02-20 16:25:20
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Librenms MEDIUM Librenms 2026

Referanslar

https://github.com/librenms/librenms/commit/087608cf9f851189847cb8e8e5ad002e59170c58 https://github.com/librenms/librenms/pull/19039 https://github.com/librenms/librenms/releases/tag/26.2.0 https://github.com/librenms/librenms/security/advisories/GHSA-6xmx-xr9p-58p7