Multiple vulnerabilities in LibreNMS (August 4, 2026)

unknownCVE-2026-45694

Multiple vulnerabilities have been discovered in LibreNMS. They allow an attacker to cause remote arbitrary code execution, server-side request forgery (SSRF), and remote indirect code injection (XSS).

CSIRTS triage

vendor: LibreNMS product: LibreNMS Remote code execution Server-side request forgery Cross-site scripting

What: Multiple vulnerabilities including remote code execution, SSRF, and XSS (indirect code injection).
Who is affected: LibreNMS deployments affected by CVE-2026-45694.
Urgency: Critical; remote code execution vulnerability requires immediate remediation.
Action: Patch LibreNMS to a version addressing CVE-2026-45694.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch LibreNMS

Get an email when a new LibreNMS advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-08-04
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0966/

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-45694	coverage & exploitation status	NVD · CVE.org

Multiple vulnerabilities in LibreNMS (August 4, 2026)

CSIRTS triage

Details

Referenced CVEs

More from CERT-FR Avis de sécurité