Beveiligingsadvies

CVE-2026-27016

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-20 01:34:11

Laatst bijgewerkt 2026-02-20 15:34:34

Toegewezen door GitHub_M

CVSS-score 5.4

Status PUBLISHED

Beschrijving

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The Custom OID functionality lacks strip_tags() sanitization while other fields (name, oid, datatype) are sanitized. The unsanitized value is stored in the database and rendered without HTML escaping. This issue is fixed in version 26.2.0.

← Alle CVE's bekijken Bekijk op cve.org ↗