Packagist/librenms/librenms CVE-2026-26988: critical 9.1, EPSS 8.43%
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.
Action: Upgrade librenms/librenms to 26.2.0 or later.
composer require librenms/librenms:26.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.2.0 | - |
Fixed versions
| 26.2.0 |
Sources
- osv: GHSA-h3rv-q4rq-pqcv
- nvd: CVE-2026-26988
- https://github.com/librenms/librenms/security/advisories/GHSA-h3rv-q4rq-pqcv
- https://github.com/librenms/librenms/pull/18777
- https://github.com/librenms/librenms/commit/15429580baba03ed1dd377bada1bde4b7a1175a1
- https://github.com/librenms/librenms
CVE-2026-26988 · published · modified · JSON