CVE-2026-55182

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

PT-2026-80762

Name of the Vulnerable Software and Affected Versions LibreNMS versions 21.6.0 through 26.4.0 Description An authenticated administrator can execute arbitrary operating-system commands on the host server. The issue occurs because the deliverAlert function in LibreNMS/Alert/Transport/Signal.php...