CVE-2026-6204

EUVD-2026-21908
LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature. Successful exploitation requires administrative privileges. Exploitation could result in compromise of the underlying web server.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
PRJBLKCNA
8.5 HIGH
NETWORK
LOW
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
librenmslibrenms
𝑥
< 26.3.0
CNA
Common Weakness Enumeration
References
https://github.com/librenms/librenms/security/advisories/GHSA-pr3g-phhr-h8fh
https://projectblack.io/blog/librenms-authenticated-rce-and-xss/#binary-path-rce-poc