Packagist/librenms/librenms CVE-2026-84188: medium 4.8, EPSS 0.25%
LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users
Action: Upgrade librenms/librenms to 26.7.0 or later.
composer require librenms/librenms:26.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.7.0 | - |
Fixed versions
| 26.7.0 |
Sources
- osv: GHSA-7cj5-v4pp-v632
- https://github.com/librenms/librenms/security/advisories/GHSA-7cj5-v4pp-v632
- https://github.com/librenms/librenms
- https://github.com/librenms/librenms/releases/tag/26.7.0
CVE-2026-84188 · published · modified · JSON