LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe… (CVE-2026-108715)

CVE-2026-108715 describes an authorization bypass vulnerability in LibreNMS up to version 26.9.1.1 within includes/html/graphs/smokeping/auth.inc.php. The vulnerability arises because the authorization check validates access based on the source probe device instead of the rendered target device. As a result, users with restricted permissions on a probe device can request smokeping_in or smokeping_out graphs for arbitrary device IDs, gaining unauthorized access to latency data and device enumeration.

The vulnerability allows restricted users to bypass authorization controls and view latency data and device names for devices they should not have access to. This leads to information disclosure but does not impact integrity or availability. The CVSS 3.1 base score is 4.3 (medium severity), reflecting network attack vector, low complexity, low privileges required, no user interaction, and limited confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to probe devices and monitor for unauthorized access attempts to smokeping graphs. Avoid granting probe device permissions to untrusted users.