PT-2026-20903 · Librenms · Librenms

Snow1Nd · Published 2026-02-18 · Updated 2026-02-25 · CVE-2026-26988

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LibreNMS versions 25.12.0 and below

Description LibreNMS is a network monitoring tool. The application does not properly sanitize user input when processing IPv6 address searches in the ajax table.php endpoint. The address parameter is split into an address and a prefix, and the prefix is directly concatenated into an SQL query string without validation. This allows an attacker to inject arbitrary SQL commands, potentially leading to unauthorized data access or database manipulation.

Recommendations Update to version 26.2.0 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26988

GHSA-H3RV-Q4RQ-PQCV

Affected Products

Librenms

References · 13

• 🔥 https://github.com/librenms/librenms/security/advisories/GHSA-h3rv-q4rq-pqcv · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26988.json · Exploit
• https://github.com/librenms/librenms/commit/15429580baba03ed1dd377bada1bde4b7a1175a1 · Patch
• https://osv.dev/vulnerability/CVE-2026-26988 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h3rv-q4rq-pqcv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26988 · Security Note
• https://github.com/librenms/librenms · Note
• https://github.com/librenms/librenms/pull/18777 · Note
• https://twitter.com/TheHackerWire/status/2024893827069477242 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2024701880849334553 · Twitter Post
• https://t.me/CVEtracker/45229 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1r91qgc/resumen_diario_de_vulnerabilidades_19022026 · Reddit Post
• https://twitter.com/cracbot/status/2026613207675355169 · Twitter Post