Threats tagged 'ghsa-84cr-xjpw-q9mc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 4.4%	CVE-2026-86426 · LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected Critical9.8EPSS 4.4%2026-09-07GCVE Database LibreNMS versions before 26.8.0 have an authentication bypass vulnerability in the REST API. This flaw allows unauthenticated attackers to access protected API endpoints by exploiting MySQL type coercion with numeric values instead of string tokens. Successful exploitation can expose device credentials and administrative features, potentially enabling remote code execution via alert templates. EPSS 4.4%Vulnerability CWE-287 #ghsa-84cr-xjpw-q9mc	GCVE Database	2026-09-07

Page 1 of 1