CVE-2026-109352Proof of concept (PoC) published · CISA
LibreNMS before 26.9.0 Stored XSS via wireless sensor description
CVSS score
5.3
EPSS probability
%0.2
Risk score
0.0
Published
3 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-86426
Improper authentication in Librenms
L
Patch status unknown Public Exploits:2EPSS %4
8.6
CVE-2026-55182
LibreNMS: Remote Code Execution by Signal Alert Transportation Module
L
Patch verifiedEPSS %2
8.6
CVE-2026-84194
LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
L
Patch status unknownEPSS %2
8.7
CVE-2026-84190
LibreNMS before 26.5.0 Remote Code Execution via AboutController
L
Patch status unknownEPSS %1
8.7
CVE-2026-86427
LibreNMS before 26.8.0 Argument Injection via graph_title
L
Patch status unknownEPSS %1
8.6
CVE-2026-80214
LibreNMS Virtualisation Discovery Module RCE
L
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-109352"