https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:16:38.224601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207457 EUVD-2026-207457 2026-10-10T11:16:38.227018+00:00 EUVD-2026-207457 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47528 fkie_cve-2024-47528 2026-10-10T11:16:38.227055+00:00

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting (XSS) can be achieved by uploading a new Background for a Custom Map. Users with "admin" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload which will trigger on load. This led to Stored Cross-Site Scripting (XSS). The vulnerability is fixed in 24.9.0.

 https://cve.radiocsirt.org/vuln/ghsa-x8gm-j36p-fppf GHSA-x8gm-j36p-fppf — LibreNMS vulnerable to Stored Cross-site Scripting via File Upload 2026-10-10T11:16:38.227101+00:00

Affected: Packagist: librenms/librenms

### Summary Stored Cross-Site Scripting (XSS) can archive via Uploading a new Background for a Custom Map.

### Details Users with "admin" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload which will trigger onload. This led to Stored Cross-Site Scripting (XSS).

### PoC 1. Login using an Admin role account.

2. Go over to "$URL/maps/custom", the Manage Custom Maps. ![image](https://github.com/user-attachments/assets/9d621532-7880-4010-b12d-efd377f0cfdd)

3. Create a new map then choose to edit it. 4. Choose the "Set Background" option. ![image](https://github.com/user-attachments/assets/dc2e9453-ef3e-4649-a42f-60b7a2ad8189)

5. Choose to upload a SVG file that have this content. ```svg <svg xmlns="http://www.w3.org/2000/svg" onload="alert(document.domain)"> <circle cx="50" cy="50" r="40" /> </svg> ```

6. Once uploaded, there should be a link to the SVG return in the POST request to the API "$URL/maps/custom/1/background". ![image](https://github.com/user-attachments/assets/dc224960-0bd3-42c9-ad49-2ec85b065939)

7. Go over to that link on browser, should see a pop-up. ![image](https://github.com/user-attachments/assets/47a7db14-bd89-48fe-885a-fd80a052115e)

### Impact Attacker can use this to perform malicious java script code for malicious intent. This would impact other Admin role users and the Global Read role users. Normal users does not have permission to read the file, so they are not affected.