Skip to main content

LibreNMS EUVDEUVD-2026-66227

| CVE-2026-80214 HIGH
OS Command Injection (CWE-78)
2026-08-26 PRJBLK GHSA-gq95-24rp-w6h2
Command Injection RCE Librenms
8.6
CVSS 4.0 · Vendor: PRJBLK
Share

Severity by source

Vendor (PRJBLK) PRIMARY
8.6 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.7 MEDIUM

Admin credentials required to reach the injection point (PR:H); RCE yields full confidentiality and integrity loss on the vulnerable system; partial availability impact consistent with vendor CVSS 4.0 VA:L.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (PRJBLK).

CVSS VectorVendor: PRJBLK

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

3
Patch available
Aug 26, 2026 - 04:15 EUVD
Analysis Generated
Aug 26, 2026 - 02:43 vuln.today
CVE Published
Aug 26, 2026 - 02:11 cve.org
HIGH 8.6

DescriptionCVE.org

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server.

AnalysisAI

Command injection in LibreNMS's Virtualization Discovery module enables authenticated administrator-level users to execute arbitrary OS commands on the underlying host server. Covering all tracked versions per CPE cpe:2.3:a:librenms:librenms:*, this CWE-78 flaw was disclosed by PRJBLK alongside a publicly available proof-of-concept exploit targeting version 26.5.0. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain LibreNMS admin credentials
Delivery
Authenticate to LibreNMS web interface
Exploit
Access Virtualization Discovery module
Execution
Inject OS metacharacters into module parameter
Persist
Trigger unsanitised shell command execution
Impact
Achieve arbitrary code execution on host server
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a valid LibreNMS administrator session - the CVSS 4.0 PR:H metric explicitly confirms this is a high-privilege-required vulnerability, not exploitable by standard or read-only users. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.6 reflects the severity of full host-level code execution, but the PR:H metric is the key moderating factor: an attacker must already hold valid LibreNMS administrator credentials before the injection can be triggered, ruling out direct unauthenticated exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has compromised LibreNMS administrator credentials - via phishing, password reuse against a shared account, or insider access - authenticates to the LibreNMS web interface, navigates to the Virtualization Discovery module, and injects shell metacharacters into a relevant input parameter. The injected payload executes on the host server under the LibreNMS process account, potentially yielding a reverse shell or enabling exfiltration of SNMP credentials and device configurations. …
Remediation Consult the GitHub Security Advisory GHSA-7hmq-j399-mqwf at https://github.com/librenms/librenms/security/advisories/GHSA-7hmq-j399-mqwf for the vendor-confirmed patched version and apply the upgrade immediately; exact fixed version numbers are not confirmed from the available intelligence and must be verified from the advisory. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: conduct an access audit to identify all users with LibreNMS administrator privileges and review authentication logs for the Virtualization Discovery module; consider temporarily disabling the Virtualization Discovery module if non-essential to core operations. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Librenms

View all
CVE-2019-10669 HIGH POC
7.2 Sep 09

An issue was discovered in LibreNMS through 1.47. Rated high severity (CVSS 7.2), this vulnerability is remotely exploit
CVE-2021-44278 CRITICAL POC
9.8 Dec 03

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php. Rate
CVE-2019-10665 CRITICAL POC
9.8 Sep 09

An issue was discovered in LibreNMS through 1.47. Rated critical severity (CVSS 9.8), this vulnerability is remotely exp
CVE-2026-26988 CRITICAL POC
9.1 Feb 20

SQL injection in LibreNMS 25.12.0 and below. PoC and patch available.
CVE-2019-10668 CRITICAL POC
9.1 Sep 09

An issue was discovered in LibreNMS through 1.47. Rated critical severity (CVSS 9.1), this vulnerability is remotely exp
CVE-2026-26990 HIGH POC
8.8 Feb 20

SQL injection in LibreNMS versions 25.12.0 and below allows authenticated users to extract sensitive database informatio
CVE-2024-32461 HIGH POC
8.8 Apr 22

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Rated high severity (CVSS 8.8), this vulnera
CVE-2020-15877 HIGH POC
8.8 Jul 21

An issue was discovered in LibreNMS before 1.65.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi
CVE-2019-12463 HIGH POC
8.8 Sep 09

An issue was discovered in LibreNMS 1.50.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable,

CVE-2019-10671 HIGH POC
8.8 Sep 09

An issue was discovered in LibreNMS through 1.47. Rated high severity (CVSS 8.8), this vulnerability is remotely exploit
CVE-2026-6204 HIGH POC
8.5 Apr 13

Remote code execution in LibreNMS network monitoring platform (versions prior to 26.3.0) allows authenticated administra
CVE-2019-12465 HIGH POC
8.1 Sep 09

An issue was discovered in LibreNMS 1.50.1. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable,

Same weakness CWE-78 – OS Command Injection

View all
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2024-9474 MEDIUM POC
6.9

Same technique Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8

Share

EUVD-2026-66227 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy