https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:35:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15205 bdu:2026-15205 https://cve.radiocsirt.org/vuln/bdu:2026-15205 https://cve.radiocsirt.org/vuln/euvd-2026-363040 EUVD-2026-363040 https://cve.radiocsirt.org/vuln/euvd-2026-363040 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84193 <p>LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enroll a rogue SNMP device can inject malicious JavaScript that executes when admins view affected routing and device pages, enabling credential theft and CSRF token exfiltration.</p> <p>LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enroll a rogue SNMP device can inject malicious JavaScript that executes when admins view affected routing and device pages, enabling credential theft and CSRF token exfiltration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-84193 https://cve.radiocsirt.org/vuln/ghsa-43px-cc38-6vvc <p>LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enroll a rogue SNMP device can inject malicious JavaScript that executes when admins view affected routing and device pages, enabling credential theft and CSRF token exfiltration.</p> <p>LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags. Attackers with device management access or network access to enroll a rogue SNMP device can inject malicious JavaScript that executes when admins view affected routing and device pages, enabling credential theft and CSRF token exfiltration.</p> https://cve.radiocsirt.org/vuln/ghsa-43px-cc38-6vvc