CVE-2026-45694

mediumCVSS 5.4covered by 2 sourcesfirst seen 2026-08-04

Multiple vulnerabilities have been discovered in LibreNMS. They allow an attacker to cause remote arbitrary code execution, server-side request forgery (SSRF), and remote indirect code injection (XSS).

CSIRTS triage

What: Multiple vulnerabilities including remote code execution, SSRF, and XSS (indirect code injection).
Who is affected: LibreNMS deployments affected by CVE-2026-45694.
Urgency: Critical; remote code execution vulnerability requires immediate remediation.
Action: Patch LibreNMS to a version addressing CVE-2026-45694.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-45694

Get an email if CVE-2026-45694 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (2)

mediumGHSA-jmqm-f8q4-v7wx: LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.t…ghsa · 2026-08-12
unknownMultiple vulnerabilities in LibreNMS (August 4, 2026)cert-fr-avis · 2026-08-04

External references

NVD record for CVE-2026-45694

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-45694 status](https://www.csirts.com/badge/CVE-2026-45694)](https://www.csirts.com/cve/CVE-2026-45694)