CVE-2026-26987: Librenms

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. This issue has been fixed in version 26.2.0.

Affected products

• Librenms Librenms: before 26.2.0 (fixed in 26.2.0)

Published 2026-02-20. Last modified 2026-06-17.