CVE-2026-109354

LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...

CVE-2026-109354

LibreNMS versions prior to 26.9.0 are vulnerable to a path traversal vulnerability in the nfsen_channel_common.inc.php component. This flaw allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. An attacker with access to a single NFSen-ena...

EUVD-2026-97656

LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...

CVE-2026-109354 LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter

LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...

Collectd-Web 0.4.0 Cross Site Scripting

Title -Collectd-web XSS Exploit Title : XSS Vulnerabilitie in Collectd-web Date: Sun May 22 11:55:36 EDT 2016 Reported Date : Sun May 22 11:55:36 EDT 2016 Vendor Homepage: https://collectd.org/wiki/index.php/Collectd-web Version: Version: 0.4.0 Software Link: https://github.com/httpdss/collectd-w...