CVE-2026-80214

8.6 highEPSS 0.5%

High (8.6). EPSS 0.5% chance of exploitation in the next 30 days.

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2026-08-26
Modified: 2026-09-09
Record from: the NVD, synced 2026-10-19

References

https://github.com/librenms/librenms/security/advisories/GHSA-7hmq-j399-mqwf
https://projectblack.io/blog/librenms-authenticated-rce-26-5-0/#rce-by-command-line-injection-2641
https://github.com/librenms/librenms/security/advisories/GHSA-7hmq-j399-mqwf

Check your stack JSON