{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-26991", "tracking": { "current_release_date": "2026-03-23T03:32:43.194708Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-26991", "initial_release_date": "2026-02-18T22:39:49.808897Z", "revision_history": [ { "date": "2026-02-18T22:39:49.808897Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-02-18T22:39:52.920684Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-19T06:31:15.400047Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (150).| Product Identifiers created (149).| References created (4).| CWES updated (1)." }, { "date": "2026-02-19T06:31:28.781504Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-20T03:24:47.718221Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-02-20T03:24:54.365771Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-02-20T03:38:43.628083Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (4).| CWES updated (1)." }, { "date": "2026-02-20T03:38:55.137872Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-02-20T07:35:00.660232Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-02-20T14:13:30.462421Z", "number": "10", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-20T14:13:32.468146Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-02-20T16:26:09.484579Z", "number": "12", "summary": "CVSS created.| Products connected (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-02-20T16:26:11.836241Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-02-20T17:39:41.703237Z", "number": "14", "summary": "References created (1)." }, { "date": "2026-02-20T18:09:22.216420Z", "number": "15", "summary": "Unknown change." }, { "date": "2026-02-21T00:56:11.202841Z", "number": "16", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (146).| References created (6).| CWES updated (1)." }, { "date": "2026-02-21T00:56:30.869110Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-02-23T00:33:05.106907Z", "number": "18", "summary": "References created (1)." }, { "date": "2026-03-20T09:42:53.090356Z", "number": "19", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:42:54.889556Z", "number": "20", "summary": "NCSC Score updated." } ], "status": "interim", "version": "20" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.1", "product": { "name": "vers:unknown/0.1", "product_id": "CSAFPID-414752" } }, { "category": "product_version_range", "name": "vers:unknown/1.19", "product": { "name": "vers:unknown/1.19", "product_id": "CSAFPID-414734", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.19" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20", "product": { "name": "vers:unknown/1.20", "product_id": "CSAFPID-414744", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.20" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20.1", "product": { "name": "vers:unknown/1.20.1", "product_id": "CSAFPID-414737", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.20.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.21", "product": { "name": "vers:unknown/1.21", "product_id": "CSAFPID-414760", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.21" } } }, { "category": "product_version_range", "name": "vers:unknown/1.22", "product": { "name": "vers:unknown/1.22", "product_id": "CSAFPID-414731", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.22" } } }, { "category": "product_version_range", "name": "vers:unknown/1.22.01", "product": { "name": "vers:unknown/1.22.01", "product_id": "CSAFPID-414741", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.22.01" } } }, { "category": "product_version_range", "name": "vers:unknown/1.23", "product": { "name": "vers:unknown/1.23", "product_id": "CSAFPID-414748", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.23" } } }, { "category": "product_version_range", "name": "vers:unknown/1.24", "product": { "name": "vers:unknown/1.24", "product_id": "CSAFPID-414735", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.24" } } }, { "category": "product_version_range", "name": "vers:unknown/1.25", "product": { "name": "vers:unknown/1.25", "product_id": "CSAFPID-414739", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.25" } } }, { "category": "product_version_range", "name": "vers:unknown/1.26", "product": { "name": "vers:unknown/1.26", "product_id": "CSAFPID-414755", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.26" } } }, { "category": "product_version_range", "name": "vers:unknown/1.27", "product": { "name": "vers:unknown/1.27", "product_id": "CSAFPID-414730", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.27" } } }, { "category": "product_version_range", "name": "vers:unknown/1.28", "product": { "name": "vers:unknown/1.28", "product_id": "CSAFPID-414746", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.28" } } }, { "category": "product_version_range", "name": "vers:unknown/1.29", "product": { "name": "vers:unknown/1.29", "product_id": "CSAFPID-414745", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.29" } } }, { "category": "product_version_range", "name": "vers:unknown/1.30", "product": { "name": "vers:unknown/1.30", "product_id": "CSAFPID-414727", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.30" } } }, { "category": "product_version_range", "name": "vers:unknown/1.30.01", "product": { "name": "vers:unknown/1.30.01", "product_id": "CSAFPID-414749", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.30.01" } } }, { "category": "product_version_range", "name": "vers:unknown/1.31", "product": { "name": "vers:unknown/1.31", "product_id": "CSAFPID-414750", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.31" } } }, { "category": "product_version_range", "name": "vers:unknown/1.31.01", "product": { "name": "vers:unknown/1.31.01", "product_id": "CSAFPID-414740", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.31.01" } } }, { "category": "product_version_range", "name": "vers:unknown/1.31.02", "product": { "name": "vers:unknown/1.31.02", "product_id": "CSAFPID-414757", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.31.02" } } }, { "category": "product_version_range", "name": "vers:unknown/1.31.03", "product": { "name": "vers:unknown/1.31.03", "product_id": "CSAFPID-414728", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.31.03" } } }, { "category": "product_version_range", "name": "vers:unknown/1.32", "product": { "name": "vers:unknown/1.32", "product_id": "CSAFPID-414754", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.32" } } }, { "category": "product_version_range", "name": "vers:unknown/1.32.01", "product": { "name": "vers:unknown/1.32.01", "product_id": "CSAFPID-414729", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.32.01" } } }, { "category": "product_version_range", "name": "vers:unknown/1.33", "product": { "name": "vers:unknown/1.33", "product_id": "CSAFPID-414738", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.33" } } }, { "category": "product_version_range", "name": "vers:unknown/1.33.01", "product": { "name": "vers:unknown/1.33.01", "product_id": "CSAFPID-414761", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.33.01" } } }, { "category": "product_version_range", "name": "vers:unknown/1.34", "product": { "name": "vers:unknown/1.34", "product_id": "CSAFPID-414758", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.34" } } }, { "category": "product_version_range", "name": "vers:unknown/1.35", "product": { "name": "vers:unknown/1.35", "product_id": "CSAFPID-414742", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.35" } } }, { "category": "product_version_range", "name": "vers:unknown/1.36", "product": { "name": "vers:unknown/1.36", "product_id": "CSAFPID-414747", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.36" } } }, { "category": "product_version_range", "name": "vers:unknown/1.36.01", "product": { "name": "vers:unknown/1.36.01", "product_id": "CSAFPID-414736", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.36.01" } } }, { "category": "product_version_range", "name": "vers:unknown/1.37", "product": { "name": "vers:unknown/1.37", "product_id": "CSAFPID-414733", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.37" } } }, { "category": "product_version_range", "name": "vers:unknown/1.38", "product": { "name": "vers:unknown/1.38", "product_id": "CSAFPID-414753", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.38" } } }, { "category": "product_version_range", "name": "vers:unknown/1.39", "product": { "name": "vers:unknown/1.39", "product_id": "CSAFPID-414751", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.39" } } }, { "category": "product_version_range", "name": "vers:unknown/1.40", "product": { "name": "vers:unknown/1.40", "product_id": "CSAFPID-414762", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.40" } } }, { "category": "product_version_range", "name": "vers:unknown/1.41", "product": { "name": "vers:unknown/1.41", "product_id": "CSAFPID-414743", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.41" } } }, { "category": "product_version_range", "name": "vers:unknown/1.42", "product": { "name": "vers:unknown/1.42", "product_id": "CSAFPID-414759", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.42" } } }, { "category": "product_version_range", "name": "vers:unknown/1.42.01", "product": { "name": "vers:unknown/1.42.01", "product_id": "CSAFPID-414756", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.42.01" } } }, { "category": "product_version_range", "name": "vers:unknown/1.43", "product": { "name": "vers:unknown/1.43", "product_id": "CSAFPID-414732", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.43" } } }, { "category": "product_version_range", "name": "vers:unknown/1.44", "product": { "name": "vers:unknown/1.44", "product_id": "CSAFPID-422506", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.44" } } }, { "category": "product_version_range", "name": "vers:unknown/1.45", "product": { "name": "vers:unknown/1.45", "product_id": "CSAFPID-422505", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.45" } } }, { "category": "product_version_range", "name": "vers:unknown/1.46", "product": { "name": "vers:unknown/1.46", "product_id": "CSAFPID-421991", "product_identification_helper": { "cpe": "cpe:2.3:a:librenms:librenms:1.46:*:*:*:*:*:*:*", "purl": "pkg:composer/librenms/librenms@1.46" } } }, { "category": "product_version_range", "name": "vers:unknown/1.47", "product": { "name": "vers:unknown/1.47", "product_id": "CSAFPID-422507", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.47" } } }, { "category": "product_version_range", "name": "vers:unknown/1.48", "product": { "name": "vers:unknown/1.48", "product_id": "CSAFPID-468397", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.48" } } }, { "category": "product_version_range", "name": "vers:unknown/1.48.1", "product": { "name": "vers:unknown/1.48.1", "product_id": "CSAFPID-468398", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.48.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.49", "product": { "name": "vers:unknown/1.49", "product_id": "CSAFPID-468399", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.49" } } }, { "category": "product_version_range", "name": "vers:unknown/1.50", "product": { "name": "vers:unknown/1.50", "product_id": "CSAFPID-468400", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.50" } } }, { "category": "product_version_range", "name": "vers:unknown/1.50.1", "product": { "name": "vers:unknown/1.50.1", "product_id": "CSAFPID-468396", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.50.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.51", "product": { "name": "vers:unknown/1.51", "product_id": "CSAFPID-468394", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.51" } } }, { "category": "product_version_range", "name": "vers:unknown/1.52", "product": { "name": "vers:unknown/1.52", "product_id": "CSAFPID-468395", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.52" } } }, { "category": "product_version_range", "name": "vers:unknown/1.53", "product": { "name": "vers:unknown/1.53", "product_id": "CSAFPID-560091", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.53" } } }, { "category": "product_version_range", "name": "vers:unknown/1.53.1", "product": { "name": "vers:unknown/1.53.1", "product_id": "CSAFPID-560089", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.53.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.54", "product": { "name": "vers:unknown/1.54", "product_id": "CSAFPID-481797", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.54" } } }, { "category": "product_version_range", "name": "vers:unknown/1.55", "product": { "name": "vers:unknown/1.55", "product_id": "CSAFPID-560082", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.55" } } }, { "category": "product_version_range", "name": "vers:unknown/1.56", "product": { "name": "vers:unknown/1.56", "product_id": "CSAFPID-560088", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.56" } } }, { "category": "product_version_range", "name": "vers:unknown/1.57", "product": { "name": "vers:unknown/1.57", "product_id": "CSAFPID-560090", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.57" } } }, { "category": "product_version_range", "name": "vers:unknown/1.58", "product": { "name": "vers:unknown/1.58", "product_id": "CSAFPID-560078", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.58" } } }, { "category": "product_version_range", "name": "vers:unknown/1.58.1", "product": { "name": "vers:unknown/1.58.1", "product_id": "CSAFPID-560085", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.58.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.59", "product": { "name": "vers:unknown/1.59", "product_id": "CSAFPID-560081", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.59" } } }, { "category": "product_version_range", "name": "vers:unknown/1.60", "product": { "name": "vers:unknown/1.60", "product_id": "CSAFPID-560087", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.60" } } }, { "category": "product_version_range", "name": "vers:unknown/1.61", "product": { "name": "vers:unknown/1.61", "product_id": "CSAFPID-560083", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.61" } } }, { "category": "product_version_range", "name": "vers:unknown/1.62", "product": { "name": "vers:unknown/1.62", "product_id": "CSAFPID-560079", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.62" } } }, { "category": "product_version_range", "name": "vers:unknown/1.62.1", "product": { "name": "vers:unknown/1.62.1", "product_id": "CSAFPID-560093", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.62.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.62.2", "product": { "name": "vers:unknown/1.62.2", "product_id": "CSAFPID-560086", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.62.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.63", "product": { "name": "vers:unknown/1.63", "product_id": "CSAFPID-560092", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.63" } } }, { "category": "product_version_range", "name": "vers:unknown/1.64", "product": { "name": "vers:unknown/1.64", "product_id": "CSAFPID-560084", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.64" } } }, { "category": "product_version_range", "name": "vers:unknown/1.64.1", "product": { "name": "vers:unknown/1.64.1", "product_id": "CSAFPID-560077", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.64.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.65", "product": { "name": "vers:unknown/1.65", "product_id": "CSAFPID-560080", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.65" } } }, { "category": "product_version_range", "name": "vers:unknown/1.65.1", "product": { "name": "vers:unknown/1.65.1", "product_id": "CSAFPID-590292", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.65.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.66", "product": { "name": "vers:unknown/1.66", "product_id": "CSAFPID-590286", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.66" } } }, { "category": "product_version_range", "name": "vers:unknown/1.67", "product": { "name": "vers:unknown/1.67", "product_id": "CSAFPID-590287", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.67" } } }, { "category": "product_version_range", "name": "vers:unknown/1.68", "product": { "name": "vers:unknown/1.68", "product_id": "CSAFPID-590291", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.68" } } }, { "category": "product_version_range", "name": "vers:unknown/1.69", "product": { "name": "vers:unknown/1.69", "product_id": "CSAFPID-590290", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.69" } } }, { "category": "product_version_range", "name": "vers:unknown/1.70.0", "product": { "name": "vers:unknown/1.70.0", "product_id": "CSAFPID-590288", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.70.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.70.1", "product": { "name": "vers:unknown/1.70.1", "product_id": "CSAFPID-590289", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@1.70.1" } } }, { "category": "product_version_range", "name": "vers:unknown/201505", "product": { "name": "vers:unknown/201505", "product_id": "CSAFPID-3332595" } }, { "category": "product_version_range", "name": "vers:unknown/201506", "product": { "name": "vers:unknown/201506", "product_id": "CSAFPID-3332596" } }, { "category": "product_version_range", "name": "vers:unknown/201507", "product": { "name": "vers:unknown/201507", "product_id": "CSAFPID-3332597" } }, { "category": "product_version_range", "name": "vers:unknown/201508", "product": { "name": "vers:unknown/201508", "product_id": "CSAFPID-3332598" } }, { "category": "product_version_range", "name": "vers:unknown/201509", "product": { "name": "vers:unknown/201509", "product_id": "CSAFPID-3332599" } }, { "category": "product_version_range", "name": "vers:unknown/201510", "product": { "name": "vers:unknown/201510", "product_id": "CSAFPID-3332600" } }, { "category": "product_version_range", "name": "vers:unknown/201511", "product": { "name": "vers:unknown/201511", "product_id": "CSAFPID-3332601" } }, { "category": "product_version_range", "name": "vers:unknown/201512", "product": { "name": "vers:unknown/201512", "product_id": "CSAFPID-3332602" } }, { "category": "product_version_range", "name": "vers:unknown/201601", "product": { "name": "vers:unknown/201601", "product_id": "CSAFPID-3332603" } }, { "category": "product_version_range", "name": "vers:unknown/201602", "product": { "name": "vers:unknown/201602", "product_id": "CSAFPID-3332604" } }, { "category": "product_version_range", "name": "vers:unknown/201603", "product": { "name": "vers:unknown/201603", "product_id": "CSAFPID-3332605" } }, { "category": "product_version_range", "name": "vers:unknown/201604", "product": { "name": "vers:unknown/201604", "product_id": "CSAFPID-3332606" } }, { "category": "product_version_range", "name": "vers:unknown/201605", "product": { "name": "vers:unknown/201605", "product_id": "CSAFPID-3332607" } }, { "category": "product_version_range", "name": "vers:unknown/201606", "product": { "name": "vers:unknown/201606", "product_id": "CSAFPID-3332608" } }, { "category": "product_version_range", "name": "vers:unknown/201607", "product": { "name": "vers:unknown/201607", "product_id": "CSAFPID-3332609" } }, { "category": "product_version_range", "name": "vers:unknown/201608", "product": { "name": "vers:unknown/201608", "product_id": "CSAFPID-3332610" } }, { "category": "product_version_range", "name": "vers:unknown/20160828", "product": { "name": "vers:unknown/20160828", "product_id": "CSAFPID-3332611" } }, { "category": "product_version_range", "name": "vers:unknown/201609", "product": { "name": "vers:unknown/201609", "product_id": "CSAFPID-3332612" } }, { "category": "product_version_range", "name": "vers:unknown/21.1.0", "product": { "name": "vers:unknown/21.1.0", "product_id": "CSAFPID-678956", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.10.0", "product": { "name": "vers:unknown/21.10.0", "product_id": "CSAFPID-730682", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.10.1", "product": { "name": "vers:unknown/21.10.1", "product_id": "CSAFPID-730672", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/21.10.2", "product": { "name": "vers:unknown/21.10.2", "product_id": "CSAFPID-730678", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.10.2" } } }, { "category": "product_version_range", "name": "vers:unknown/21.11.0", "product": { "name": "vers:unknown/21.11.0", "product_id": "CSAFPID-747289", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.12.0", "product": { "name": "vers:unknown/21.12.0", "product_id": "CSAFPID-747290", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.12.1", "product": { "name": "vers:unknown/21.12.1", "product_id": "CSAFPID-747292", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.12.1" } } }, { "category": "product_version_range", "name": "vers:unknown/21.2.0", "product": { "name": "vers:unknown/21.2.0", "product_id": "CSAFPID-678942", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.3.0", "product": { "name": "vers:unknown/21.3.0", "product_id": "CSAFPID-730677", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.4.0", "product": { "name": "vers:unknown/21.4.0", "product_id": "CSAFPID-730683", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.5.0", "product": { "name": "vers:unknown/21.5.0", "product_id": "CSAFPID-730674", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.5.1", "product": { "name": "vers:unknown/21.5.1", "product_id": "CSAFPID-730679", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/21.6.0", "product": { "name": "vers:unknown/21.6.0", "product_id": "CSAFPID-730675", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.7.0", "product": { "name": "vers:unknown/21.7.0", "product_id": "CSAFPID-730680", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.8.0", "product": { "name": "vers:unknown/21.8.0", "product_id": "CSAFPID-730673", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.9.0", "product": { "name": "vers:unknown/21.9.0", "product_id": "CSAFPID-730676", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/21.9.1", "product": { "name": "vers:unknown/21.9.1", "product_id": "CSAFPID-730681", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@21.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/22.1.0", "product": { "name": "vers:unknown/22.1.0", "product_id": "CSAFPID-747291", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.10.0", "product": { "name": "vers:unknown/22.10.0", "product_id": "CSAFPID-989996", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.11.0", "product": { "name": "vers:unknown/22.11.0", "product_id": "CSAFPID-990004", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.12.0", "product": { "name": "vers:unknown/22.12.0", "product_id": "CSAFPID-3623836", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.2.0", "product": { "name": "vers:unknown/22.2.0", "product_id": "CSAFPID-748863", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.2.1", "product": { "name": "vers:unknown/22.2.1", "product_id": "CSAFPID-748862", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/22.2.2", "product": { "name": "vers:unknown/22.2.2", "product_id": "CSAFPID-828472", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/22.3.0", "product": { "name": "vers:unknown/22.3.0", "product_id": "CSAFPID-809396", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.4.0", "product": { "name": "vers:unknown/22.4.0", "product_id": "CSAFPID-828470", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.4.1", "product": { "name": "vers:unknown/22.4.1", "product_id": "CSAFPID-828471", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/22.5.0", "product": { "name": "vers:unknown/22.5.0", "product_id": "CSAFPID-828473", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.6.0", "product": { "name": "vers:unknown/22.6.0", "product_id": "CSAFPID-834128", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.7.0", "product": { "name": "vers:unknown/22.7.0", "product_id": "CSAFPID-828469", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.8.0", "product": { "name": "vers:unknown/22.8.0", "product_id": "CSAFPID-828474", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/22.9.0", "product": { "name": "vers:unknown/22.9.0", "product_id": "CSAFPID-828468", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@22.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.1.0", "product": { "name": "vers:unknown/23.1.0", "product_id": "CSAFPID-990000", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.1.1", "product": { "name": "vers:unknown/23.1.1", "product_id": "CSAFPID-990002", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/23.10.0", "product": { "name": "vers:unknown/23.10.0", "product_id": "CSAFPID-1001692", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.11.0", "product": { "name": "vers:unknown/23.11.0", "product_id": "CSAFPID-1165684", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.2.0", "product": { "name": "vers:unknown/23.2.0", "product_id": "CSAFPID-989997", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.4.0", "product": { "name": "vers:unknown/23.4.0", "product_id": "CSAFPID-989999", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.4.1", "product": { "name": "vers:unknown/23.4.1", "product_id": "CSAFPID-990003", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/23.5.0", "product": { "name": "vers:unknown/23.5.0", "product_id": "CSAFPID-989998", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.6.0", "product": { "name": "vers:unknown/23.6.0", "product_id": "CSAFPID-989995", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.7.0", "product": { "name": "vers:unknown/23.7.0", "product_id": "CSAFPID-990001", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.8.0", "product": { "name": "vers:unknown/23.8.0", "product_id": "CSAFPID-1001693", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.8.1", "product": { "name": "vers:unknown/23.8.1", "product_id": "CSAFPID-1001694", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/23.8.2", "product": { "name": "vers:unknown/23.8.2", "product_id": "CSAFPID-1001695", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.8.2" } } }, { "category": "product_version_range", "name": "vers:unknown/23.9.0", "product": { "name": "vers:unknown/23.9.0", "product_id": "CSAFPID-1001696", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/23.9.1", "product": { "name": "vers:unknown/23.9.1", "product_id": "CSAFPID-1001697", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@23.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/24.1.0", "product": { "name": "vers:unknown/24.1.0", "product_id": "CSAFPID-1342089", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.10.0", "product": { "name": "vers:unknown/24.10.0", "product_id": "CSAFPID-1321778", "product_identification_helper": { "cpe": "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*", "purl": "pkg:composer/librenms/librenms@24.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.10.1", "product": { "name": "vers:unknown/24.10.1", "product_id": "CSAFPID-3665971", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/24.11.0", "product": { "name": "vers:unknown/24.11.0", "product_id": "CSAFPID-3015210", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.12.0", "product": { "name": "vers:unknown/24.12.0", "product_id": "CSAFPID-3075139", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.2.0", "product": { "name": "vers:unknown/24.2.0", "product_id": "CSAFPID-1342093", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.3.0", "product": { "name": "vers:unknown/24.3.0", "product_id": "CSAFPID-1342085", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.4.0", "product": { "name": "vers:unknown/24.4.0", "product_id": "CSAFPID-1342090", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.4.1", "product": { "name": "vers:unknown/24.4.1", "product_id": "CSAFPID-1342084", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/24.5.0", "product": { "name": "vers:unknown/24.5.0", "product_id": "CSAFPID-1342091", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.6.0", "product": { "name": "vers:unknown/24.6.0", "product_id": "CSAFPID-1342086", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.7.0", "product": { "name": "vers:unknown/24.7.0", "product_id": "CSAFPID-1342087", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.8.0", "product": { "name": "vers:unknown/24.8.0", "product_id": "CSAFPID-1342092", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.8.1", "product": { "name": "vers:unknown/24.8.1", "product_id": "CSAFPID-1342094", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/24.9.0", "product": { "name": "vers:unknown/24.9.0", "product_id": "CSAFPID-1158317", "product_identification_helper": { "cpe": "cpe:2.3:a:librenms:librenms:24.9.0:*:*:*:*:*:*:*", "purl": "pkg:composer/librenms/librenms@24.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/24.9.1", "product": { "name": "vers:unknown/24.9.1", "product_id": "CSAFPID-1342088", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@24.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/25.1.0", "product": { "name": "vers:unknown/25.1.0", "product_id": "CSAFPID-3075143", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.10.0", "product": { "name": "vers:unknown/25.10.0", "product_id": "CSAFPID-5195217", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.11.0", "product": { "name": "vers:unknown/25.11.0", "product_id": "CSAFPID-5281381", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.12.0", "product": { "name": "vers:unknown/25.12.0", "product_id": "CSAFPID-5457046", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.2.0", "product": { "name": "vers:unknown/25.2.0", "product_id": "CSAFPID-3075140", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.3.0", "product": { "name": "vers:unknown/25.3.0", "product_id": "CSAFPID-3075145", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.4.0", "product": { "name": "vers:unknown/25.4.0", "product_id": "CSAFPID-3075142", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.5.0", "product": { "name": "vers:unknown/25.5.0", "product_id": "CSAFPID-3075141", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.6.0", "product": { "name": "vers:unknown/25.6.0", "product_id": "CSAFPID-3075144", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.7.0", "product": { "name": "vers:unknown/25.7.0", "product_id": "CSAFPID-3744196", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.8.0", "product": { "name": "vers:unknown/25.8.0", "product_id": "CSAFPID-5099839", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.9.0", "product": { "name": "vers:unknown/25.9.0", "product_id": "CSAFPID-5099840", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/25.9.1", "product": { "name": "vers:unknown/25.9.1", "product_id": "CSAFPID-5099841", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@25.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/26.1.0", "product": { "name": "vers:unknown/26.1.0", "product_id": "CSAFPID-5632926", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@26.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/26.1.1", "product": { "name": "vers:unknown/26.1.1", "product_id": "CSAFPID-5632927", "product_identification_helper": { "purl": "pkg:composer/librenms/librenms@26.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/<26.2.0", "product": { "name": "vers:unknown/<26.2.0", "product_id": "CSAFPID-5643422", "product_identification_helper": { "cpe": "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<26.2.0", "product": { "name": "vers:unknown/>=0|<26.2.0", "product_id": "CSAFPID-5632929" } } ], "category": "product_name", "name": "librenms" } ], "category": "vendor", "name": "librenms" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-26991", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "### Summary\n**/device-groups name Stored Cross-Site Scripting**\n- HTTP POST\n- Request-URI(s): \"/device-groups\"\n- Vulnerable parameter(s): \"name\"\n- Attacker must be authenticated with \"admin\" privileges.\n- When a user adds a device group, an HTTP POST request is sent to the Request-URI \"/device-groups\". The name of the newly created device group is stored in the value of the name parameter.\n- After the device group is created, the entry is displayed along with some relevant buttons like Rediscover Devices, Edit, and Delete.\n\n### Details\nThe vulnerability exists as the name of the device group is not sanitized of HTML/JavaScript-related characters\nor strings. When the delete button is rendered, the following template is used to render the page:\n\n_resources/views/device-group/index.blade.php:_\n```\n@section('title', __('Device Groups'))\n@section('content')\n
\n\n// [...Truncated...]\n@foreach($device_groups as $device_group)\n// [...Truncated...]\n\n