CVE-2026-84192 in LibreNMS
Resumen
por MITRE • 2026-09-01
LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog program fields that executes when authenticated users view affected pages.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.