CVE-2026-26987 | LibreNMS up to 26.1.x email cross site scripting (GHSA-gqx7-99jw-6fpr)

February 20, 2026 Yanac

A vulnerability, which was classified as problematic, was found in LibreNMS up to 26.1.x. Affected by this issue is some unknown functionality. Executing a manipulation of the argument email can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-26987. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More