SQL Injection Vulnerability in LibreNMS Affects Network Monitoring Tools

CVE-2026-26988

What is CVE-2026-26988?

LibreNMS, a PHP/MySQL/SNMP based network monitoring tool, suffers from a critical vulnerability in the ajax_table.php endpoint due to improper sanitization of user input during IPv6 address searches. The prefix of the address parameter is concatenated into the SQL query without validation, enabling an attacker to inject arbitrary SQL commands. This could result in unauthorized access to sensitive data or allow manipulation of the database itself. Users are advised to update to version 26.2.0 or later, where this issue has been addressed.

References