VULNERABILITY INTELLIGENCE

CVE-2026-6204

CVSS score7.2 HIGH
EPSS probability7.53%
CISA KEVNot currently listed
Published2026-04-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature. Successful exploitation requires administrative privileges. Exploitation could result in compromise of the underlying web server.

Weakness classification

  • ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a: CWE-78

Primary references