CVE-2026-109357 | LibreNMS up to 26.8.x LDAP Authorization PHP_AUTH_USER injection

October 12, 2026 Yanac

A vulnerability, which was classified as critical, was found in LibreNMS up to 26.8.x. Affected by this vulnerability is an unknown functionality of the component LDAP Authorization. Executing a manipulation of the argument PHP_AUTH_USER can lead to injection.

This vulnerability is handled as CVE-2026-109357. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More