CVE-2026-84191 | LibreNMS up to 26.4.x VRF Display Pages cross site scripting

A vulnerability has been found in LibreNMS up to 26.4.x and classified as problematic. Impacted is an unknown function of the component VRF Display Pages. The manipulation of the argument mplsVpnVrfDescription/vrf_name/mplsVpnVrfRouteDistinguisher leads to cross site scripting.

This vulnerability is traded as CVE-2026-84191. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More