{"action":"Upgrade librenms/librenms to 26.2.0 or later.","affected":[{"fixed":"26.2.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2026-26988"],"ecosystem":"Packagist","epss":0.00535,"exploited":false,"fixed_versions":["26.2.0"],"ghsa_id":"GHSA-h3rv-q4rq-pqcv","id":"tcs_01M5KF39A35PTM39WVANN4AE82","modified_at":"2026-02-22T23:24:42.896895Z","published_at":"2026-02-18T22:30:18Z","references":["https://osv.dev/vulnerability/GHSA-h3rv-q4rq-pqcv","https://github.com/librenms/librenms/security/advisories/GHSA-h3rv-q4rq-pqcv","https://github.com/librenms/librenms/pull/18777","https://github.com/librenms/librenms/commit/15429580baba03ed1dd377bada1bde4b7a1175a1","https://github.com/librenms/librenms"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-h3rv-q4rq-pqcv","url":"https://osv.dev/vulnerability/GHSA-h3rv-q4rq-pqcv"}],"summary":"LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream."}