https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:28:44 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0174 certfr-2026-avi-0174 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0174 https://cve.radiocsirt.org/vuln/euvd-2026-268922 EUVD-2026-268922 https://cve.radiocsirt.org/vuln/euvd-2026-268922 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26987 <p>LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. This issue has been fixed in version 26.2.0.</p> <p>LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to Reflected XSS attacks via email field. This issue has been fixed in version 26.2.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-26987 https://cve.radiocsirt.org/vuln/ghsa-gqx7-99jw-6fpr <p><strong>Affected:</strong> Packagist: librenms/librenms</p> <p>### Summary reflected xss via email field</p> <p>### Details 1. visit `http://127.0.0.1/settings/alerting/email` 2. in the email address input but this payload `&lt;img src=1 onerror=alert(document.cookie)&gt;` 3. notice the alert ### PoC - video attached with the report https://github.com/user-attachments/assets/c1b443f5-85c6-4545-b04f-def06d82b42e</p> <p>### Impact can lead to ATO</p> <p><strong>Affected:</strong> Packagist: librenms/librenms</p> <p>### Summary reflected xss via email field</p> <p>### Details 1. visit `http://127.0.0.1/settings/alerting/email` 2. in the email address input but this payload `&lt;img src=1 onerror=alert(document.cookie)&gt;` 3. notice the alert ### PoC - video attached with the report https://github.com/user-attachments/assets/c1b443f5-85c6-4545-b04f-def06d82b42e</p> <p>### Impact can lead to ATO</p> https://cve.radiocsirt.org/vuln/ghsa-gqx7-99jw-6fpr