Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. This issue has been fixed in version 26.2.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-26987 Reflected XSS Vulnerability in LibreNMS Network Monitoring Tool Before 26.2.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26987
Post summary
A reflected XSS vulnerability has been disclosed in LibreNMS Network Monitoring Tool versions prior to 26.2.0, as detailed by the referenced vulnerability entry.
CVE-2026-26987 LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. Thi… https://www.cve.org/CVERecord?id=CVE-2026-26987
Post summary
LibreNMS versions 25.12.0 and below are vulnerable to a reflected XSS flaw via the email field, reported in CVE-2026-26987.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | librenms | librenms | - | - | - |