CVE-2026-84190
Received Received - Intake

Remote Code Execution in LibreNMS Before 26.5.0

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: VulnCheck

Description
LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell_exec() without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable file and trigger code execution by accessing the /about endpoint.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-01
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-84190
EUVD
EUVD-2026-69027

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
librenms librenms to 26.5.0 (exc)
librenms librenms 26.3.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

LibreNMS versions before 26.5.0 have a remote code execution vulnerability in the AboutController. The snmpget configuration parameter is passed to shell_exec() without validation. An authenticated admin can modify snmpget to point to a malicious executable and trigger code execution by accessing the /about endpoint.

Detection Guidance

Check LibreNMS version with: grep "VERSION" /opt/librenms/include/version.php. If version is less than 26.5.0, the system is vulnerable. Inspect the snmpget configuration path in the web interface under Global Settings > System > External Settings.

Impact Analysis

An attacker with admin access can execute arbitrary system commands, establish reverse shells, steal sensitive data, or maintain persistent access to the server. This could lead to full server compromise and data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and access controls. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Upgrade LibreNMS to version 26.5.0 or later immediately. If upgrading is not possible, restrict access to the /about endpoint and disable snmpget configuration modifications by administrators. Review system logs for suspicious activity related to shell_exec calls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84190. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart