CVE-2026-26990
1 advisory.
Packagist/librenms/librenms CVE-2026-26990: high 8.8, EPSS 0.68%
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.php
Action: Upgrade librenms/librenms to 26.2.0 or later.
composer require librenms/librenms:26.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.2.0 | - |
Fixed versions
| 26.2.0 |
Sources
- osv: GHSA-79q9-wc6p-cf92
- https://github.com/librenms/librenms/security/advisories/GHSA-79q9-wc6p-cf92
- https://github.com/librenms/librenms/pull/18777
- https://github.com/librenms/librenms/commit/15429580baba03ed1dd377bada1bde4b7a1175a1
- https://github.com/librenms/librenms
CVE-2026-26990 · published · modified · JSON