VulnerabilityAnalyzed
CVE-2026-6204
LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.
HIGH 8.5EPSS 7.53%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.53%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature. Successful exploitation requires administrative privileges. Exploitation could result in compromise of the underlying web server.
- CVSS 4.0
- 8.5 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 7.53% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- librenms/librenms
- Source
- ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a
References
- https://github.com/librenms/librenms/security/advisories/GHSA-pr3g-phhr-h8fhThird Party Advisory
- https://projectblack.io/blog/librenms-authenticated-rce-and-xss/#binary-path-rce-pocExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.