LibreNMS LDAP Authorization Full Control

The vulnerability of the “ldap-authorization” and “ad-authorization” configurations in the LibreNMS network monitoring system is related to the failure to take measures to neutralize special elements in LDAP requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, ...

CVE-2026-109357

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence. When REMOTEUSER is not forwarded, unauthenticated attackers can send a wildcar...

EUVD-2026-97659

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence. When REMOTEUSER is not forwarded, unauthenticated attackers can send a wildcar...

PT-2026-110774

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 26.9.0 Description An LDAP filter injection exists in ldap-authorization and ad-authorization modes. This occurs because usernames are inserted unescaped into LDAP search filters, and the authentication process only...

PT-2026-114751

Уязвимость конфигурации ldap-authorization и ad-authorization системы сетевого мониторинга LibreNMS связана с непринятием мер по нейтрализации специальных элементов в запросе LDAP. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить полный контроль над системой...