Skip to content
Threat Feed
Subscribe

Product

LibreNMS (< 26.8.0)

1 brief RSS
high advisory

Argument Injection in LibreNMS graph_title Parameter

Authenticated attackers can exploit CVE-2026-86427 in LibreNMS before version 26.8.0 to inject arbitrary rrdtool arguments, bypassing authorization controls to read unauthorized RRD files or execute commands.

LibreNMS vulnerability web-application command-injection
1r 1t 1c