Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploitation requires administrative privileges. Exploitation could result in XSS attacks being performed against other users with access to the page.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-13 | 2 | Disclosure2 |
| 2026-05-18 | 1 | Disclosure1 |
🟠 LibreNMS, Stored Cross-Site Scripting (XSS), #CVE-2026-2728 (Medium) https://dailycve.com/librenms-stored-cross-site-scripting-xss-cve-2026-2728-medium/
Post summary
The post announces a Medium‑rated Stored XSS vulnerability (CVE‑2026‑2728) in LibreNMS, without any PoC, exploit, patch, or active exploitation details.
CVE-2026-2728 LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploitation requires administrat… https://www.cve.org/CVERecord?id=CVE-2026-2728
Post summary
The text discloses an authenticated XSS in LibreNMS’s showconfig page affecting pre‑26.3.0 releases, with no PoC, exploit code, or patch information provided.
CVE-2026-2728 Authenticated Cross-Site Scripting in LibreNMS Before 26.3.0 Showconfig Page https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2728
Post summary
CVE-2026-2728 is an authenticated XSS vulnerability in LibreNMS showconfig page before 26.3.0, disclosed but lacking PoC, exploit code, active exploitation claims, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | librenms | librenms | - | - | - |