https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:40:49.397568+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15197 bdu:2026-15197 2026-10-03T19:40:49.527644+00:00 bdu:2026-15197 https://cve.radiocsirt.org/vuln/euvd-2026-362473 EUVD-2026-362473 2026-10-03T19:40:49.527683+00:00 EUVD-2026-362473 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84191 fkie_cve-2026-84191 2026-10-03T19:40:49.527699+00:00

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf_name, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanitization. Attackers controlling a monitored network device can inject arbitrary JavaScript through SNMP responses that executes in the browser of any user viewing VRF-related pages.

 https://cve.radiocsirt.org/vuln/ghsa-3cvh-rhc6-7rhc GHSA-3cvh-rhc6-7rhc 2026-10-03T19:40:49.527731+00:00

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf_name, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanitization. Attackers controlling a monitored network device can inject arbitrary JavaScript through SNMP responses that executes in the browser of any user viewing VRF-related pages.