https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T08:30:11.845522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-70284 EUVD-2026-70284 2026-10-28T08:30:11.847922+00:00 EUVD-2026-70284 https://cve.radiocsirt.org/vuln/fkie_cve-2018-20434 fkie_cve-2018-20434 2026-10-28T08:30:11.847954+00:00

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.

 https://cve.radiocsirt.org/vuln/ghsa-62q7-qj6g-gvr7 GHSA-62q7-qj6g-gvr7 — LibreNMS arbitrary OS commands execution 2026-10-28T08:30:11.847984+00:00

Affected: Packagist: librenms/librenms

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the `$_POST['community']` parameter to `html/pages/addhost.inc.php` during creation of a new device, and then making a `/ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php` command mishandling.

 https://cve.radiocsirt.org/vuln/gsd-2018-20434 gsd-2018-20434 2026-10-28T08:30:11.848009+00:00 gsd-2018-20434