Packagist/librenms/librenms CVE-2026-26992: medium 4.8, EPSS 0.25%

LibreNMS /port-groups name Stored Cross-Site Scripting

Action: Upgrade librenms/librenms to 26.2.0 or later.

composer require librenms/librenms:26.2.0

Affected

Fixed versions

Sources

• osv: GHSA-93fx-g747-695x
• nvd: CVE-2026-26992
• https://github.com/librenms/librenms/security/advisories/GHSA-93fx-g747-695x
• https://github.com/librenms/librenms/pull/19042
• https://github.com/librenms/librenms/commit/882fe6f90ea504a3732f83caf89bba7850a5699f
• https://github.com/librenms/librenms
• https://github.com/librenms/librenms/releases/tag/26.2.0

CVE-2026-26992 · published 2026-02-18T22:07:42Z · modified 2026-02-20T17:04:19.641902Z · JSON