LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The Custom OID functionality lacks strip_tags() sanitization while other fields (name, oid, datatype) are sanitized. The unsanitized value is stored in the database and rendered without HTML escaping. This issue is fixed in version 26.2.0.
References
| Link | Resource |
|---|---|
| https://github.com/librenms/librenms/commit/3bea263e02441690c01dea7fa3fe6ffec94af335 | Patch |
| https://github.com/librenms/librenms/pull/19040 | Issue Tracking |
| https://github.com/librenms/librenms/releases/tag/26.2.0 | Product Release Notes |
| https://github.com/librenms/librenms/security/advisories/GHSA-fqx6-693c-f55g | Third Party Advisory |
Configurations
History
20 Feb 2026, 16:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/librenms/librenms/commit/3bea263e02441690c01dea7fa3fe6ffec94af335 - Patch | |
| References | () https://github.com/librenms/librenms/pull/19040 - Issue Tracking | |
| References | () https://github.com/librenms/librenms/releases/tag/26.2.0 - Product, Release Notes | |
| References | () https://github.com/librenms/librenms/security/advisories/GHSA-fqx6-693c-f55g - Third Party Advisory | |
| First Time |
Librenms librenms
Librenms |
|
| CPE | cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:* |
20 Feb 2026, 02:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-20 02:16
Updated : 2026-02-20 16:22
NVD link : CVE-2026-27016
Mitre link : CVE-2026-27016
CVE.ORG link : CVE-2026-27016
JSON object : View
Products Affected
librenms
- librenms