CVE-2026-27016

5.4 mediumEPSS 0.3%

Medium (5.4) in librenms librenms. EPSS 0.3% chance of exploitation in the next 30 days.

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The Custom OID functionality lacks strip_tags() sanitization while other fields (name, oid, datatype) are sanitized. The unsanitized value is stored in the database and rendered without HTML escaping. This issue is fixed in version 26.2.0.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-116
Published: 2026-02-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

librenms:librenms

References

https://github.com/librenms/librenms/commit/3bea263e02441690c01dea7fa3fe6ffec94af335
https://github.com/librenms/librenms/pull/19040
https://github.com/librenms/librenms/releases/tag/26.2.0
https://github.com/librenms/librenms/security/advisories/GHSA-fqx6-693c-f55g

Check your stack JSON