https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:11:57.063287+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-84188 CVE-2026-84188 — librenms before 26.7.0 Stored XSS via graph_descr settings 2026-10-08T10:11:57.078501+00:00

Affected: librenms

LibreNMS versions <= 26.4.0 contain a stored cross-site scripting vulnerability in the graph_descr.<graphtype> configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in version 26.7.0.