CVE-2026-84190
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Sep 01, 2026
Vendor
unknown
Description
LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell_exec() without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable file and trigger code execution by accessing the /about endpoint.