Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Rules workflow. An attacker with administrative privileges can inject malicious scripts that execute in the browser context of any user who accesses the Alert Rules page. This issue has been fixed in version 26.2.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-26989 Stored XSS Vulnerability in LibreNMS Alert Rules Workflow Before 26.2.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26989
Post summary
CVE-2026-26989 is a stored XSS vulnerability in LibreNMS Alert Rules Workflow before version 26.2.0, with no PoC, patch, or active exploitation reported.
CVE-2026-26989 LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are affected by a Stored Cross-Site Scripting (XSS) vulnerabi… https://www.cve.org/CVERecord?id=CVE-2026-26989
Post summary
CVE‑2026‑26989 affects LibreNMS versions 25.12.0 and earlier by way of a stored XSS flaw, as disclosed in the CVE record.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | librenms | librenms | - | - | - |