Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/08/26 9:50 p.m.•10 views

EUVD-2026-66774

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

8.6CVSS6AI score0.01607EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/26 9:50 p.m.•46 views

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

8.6CVSS0.01607EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/26 9:50 p.m.•15 views

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

8.6CVSS6.1AI score
SaveExploits0References5
CVE
CVE
•added 2026/08/26 9:50 p.m.•41 views

CVE-2026-55182

LibreNMS , a network monitoring system, is vulnerable to command injection in the Signal alert transport module (versions 21.6.0 through 26.5.0). The root cause lies in insufficiently escaped signal-cli path and Recipient field in the deliverAlert function of Signal.php, which are passed to unsaf...

8.6CVSS6AI score0.01607EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•1 views

CVE-2026-55182: Improper Neutralization of Special Elements used in a Command

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

8.6CVSS6AI score0.01607EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/18 5:59 p.m.•17 views

GHSA-C9FV-CGMM-2WG7 LibreNMS Vulnerable to Remote Code Execution by Signal Alert Transportation module

Summary A vulnerability has been identified that allows an authenticated administrator to execute arbitrary code on the host server. By adding an alert transport entry, an attacker with administrative privileges can execute malicious commands. Details The vulnerability is caused by an unsafe exec...

8.6CVSS6.7AI score0.01607EPSS
SaveExploits0References3
Rows per page
Query Builder