🚨 CVE-2026-84190
LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell_exec() without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable file and trigger code execution by accessing the /about endpoint.
🎖@cveNotify
GitHub
Remote Code Execution via AboutController in LibreNMS
# Remote Code Execution via AboutController in LibreNMS
## Summary
A Remote Code Execution (RCE) vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administ...
September 1, 2026 5
