CVE-2026-84190

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

CVE-2026-84190

LibreNMS versions before 26.5.0 are affected by a remote code execution vulnerability in the AboutController . The root cause is that the snmpget configuration parameter is passed to shell_exec() without proper validation, allowing an authenticated administrator to point this parameter to a malic...

CVE-2026-84190 LibreNMS before 26.5.0 Remote Code Execution via AboutController

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

CVE-2026-84190 LibreNMS before 26.5.0 Remote Code Execution via AboutController

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

CVE-2026-84190 LibreNMS before 26.5.0 Remote Code Execution via AboutController

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

CVE-2026-84190

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

EUVD-2026-69027

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

CVE-2026-84190: Improper Neutralization of Special Elements used in a Command

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shellexec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

PT-2026-84153

LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell exec without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable...

GHSA-JF24-8G2H-2WG7 LibreNMS Vulnerable to Remote Code Execution via AboutController

Remote Code Execution via AboutController in LibreNMS Summary A Remote Code Execution RCE vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administrator can manipulate the snmpget configuration parameter to execute arbitrary system commands. When the /about...

LibreNMS Vulnerable to Remote Code Execution via AboutController

Remote Code Execution via AboutController in LibreNMS Summary A Remote Code Execution RCE vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administrator can manipulate the snmpget configuration parameter to execute arbitrary system commands. When the /about...

Command Injection

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Command Injection in the AboutController process when the snmpget configuration parameter is manipulated to point to ...

PT-2026-83381

Remote Code Execution via AboutController in LibreNMS Summary A Remote Code Execution RCE vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administrator can manipulate the snmpget configuration parameter to execute arbitrary system commands. When the /about...

Oracle Linux 8 : net-snmp (ELSA-2026-0750)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0750 advisory. 5.8-33.0.1 - fix error index value when snmpget is used a proxy pass Orabug: 34905643 1:5.8-33 - fix out of bound access RHEL-137501 - perl modern auth enableme...

Cacti Cross-Site Scripting Vulnerability (CNVD-2021-70092)

Cacti is an open source set of network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, uses RRDtool drawing graphs for analysis, and provides data and user management features. cacti suffers from a code injection vulnerability that stems from multiple...

NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44580)

NeDi Consulting NeDi is a suite of open source software that supports the discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary...

CVE-2020-15033

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the snmpget.php ip parameter...

CVE-2020-15033

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the snmpget.php ip parameter...

Cross site scripting

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the snmpget.php ip parameter...

CVE-2018-17555: Exposure of Sensitive Information to an Unauthorized Actor

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...