CVE-2026-26987 — LibreNMS affected by reflected XSS via email field
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. This issue has…
Published: 2026-02-20 · CVSS: 5.3 · CVSS 4.0
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. This issue has been fixed in version 26.2.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7