CVE-2026-27016 | LibreNMS up to 26.1.x Custom OID strip_tags unit cross site scripting (GHSA-fqx6-693c-f55g)

February 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in LibreNMS up to 26.1.x. Affected by this vulnerability is the function strip_tags of the component Custom OID. Performing a manipulation of the argument unit results in cross site scripting.

This vulnerability is identified as CVE-2026-27016. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More