VulnSocial

CVE-2026-86426Disclosure(librenms / librenms)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to match token hashes, gaining access to API functionality including device credentials and administrative features that enable remote code execution through alert templates.

librenms CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • librenms

Threat summary

  • Public PoC is present in monitored signal
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-09-09); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
librenms
Products
librenms

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-09: 1Mentions · 2026-09-12: 1PoC Mentioned / Linked · 2026-09-09: 1Technical Details · 2026-09-09: 1Technical Details · 2026-09-12: 109-0909-12
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-86426 - critical 🚨 LibreNMS <= 26.7.0 - Unauthenticated API Access > LibreNMS <= 26.8.0 contains an authentication bypass caused by MySQL type coercion in... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-86426 @pdnuclei #NucleiTemplates #cve

    Post summary

    The tweet alerts that CVE‑2026‑86426 is a critical unauthenticated API access flaw in LibreNMS (≤26.7.0), links to a Project Discovery library, and provides basic technical details but no evidence of active exploitation or patch availability.

    00022343
    1.3K followersView on X
  • Halil Deniz@denizhalilT
    Disclosure

    🚨 Critical Security Alert! Deep-dive vulnerability analysis of CVE-2026-86426 (CVSS 9.2): Unauthenticated API Access & RCE in LibreNMS <= 26.7.0 caused by JSON type confusion & MySQL coercion. https://denizhalil.com/2026/09/12/cve-2026-86426-librenms-unauthenticated-api-access/ #CyberSecurity #Vulnerability #LibreNMS https://t.co/d9RiJ3JsbL

    Post summary

    The post announces CVE-2026-86426 in LibreNMS, detailing unauthenticated API access and RCE via JSON type confusion and MySQL coercion, but provides no PoC, exploit, or patch information.

    0000063
    33 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applibrenmslibrenms---

Explore more

Back to dashboardlibrenms CVEslibrenms vulnerabilities