Packagist/librenms/librenms CVE-2026-84192: high 7.1

LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates

Action: Upgrade librenms/librenms to 26.5.0 or later.

composer require librenms/librenms:26.5.0

Affected

Fixed versions

Sources

• osv: GHSA-7w8c-qgxg-m7jx
• https://github.com/librenms/librenms/security/advisories/GHSA-7w8c-qgxg-m7jx
• https://github.com/librenms/librenms/pull/19660
• https://github.com/librenms/librenms/commit/6782af940c3c495755923b520a302f3a1cb1ce6b
• https://github.com/librenms/librenms
• https://github.com/librenms/librenms/releases/tag/26.5.0
• https://github.com/librenms/librenms/releases/tag/26.8.1

CVE-2026-84192 · published 2026-08-26T18:05:46Z · modified 2026-09-02T03:55:41.550842979Z · JSON