CVE-2026-6204
1 advisory.
Packagist/librenms/librenms CVE-2026-6204: high
LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write
Action: Upgrade librenms/librenms to 26.3.0 or later.
composer require librenms/librenms:26.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.48 | 26.3.0 | - |
Fixed versions
| 26.3.0 |
Sources
- osv: GHSA-pr3g-phhr-h8fh
- https://github.com/librenms/librenms/security/advisories/GHSA-pr3g-phhr-h8fh
- https://nvd.nist.gov/vuln/detail/CVE-2026-6204
- https://github.com/librenms/librenms
- https://github.com/librenms/librenms/blob/master/app/Providers/AppServiceProvider.php#L169
- https://projectblack.io/blog/librenms-authenticated-rce-and-xss/#binary-path-rce-poc
CVE-2026-6204 · published · modified · JSON