Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-1093

NIXPKGS-2026-1093
published 2 months, 1 week ago
updated 2 months, 1 week ago by @LeSuisse Activity log
  • Created suggestion
  • @LeSuisse accepted
  • @LeSuisse published on GitHub
LibreNMS versions before 26.3.0 are affected by an authenticated remote …

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature. Successful exploitation requires administrative privileges. Exploitation could result in compromise of the underlying web server.

Affected products

librenms
  • <26.3.0

Matching in nixpkgs

pkgs.librenms

Auto-discovering PHP/MySQL/SNMP based network monitoring

Package maintainers