CVE-2026-109353

CVSS 7.1 (high) · published 2026-10-12

LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php. Attackers can perform cross-table reads of users.password hashes, with results persisted in notifications_attribs and readable through the interface.

Weakness: CWE-89

Source: NVD CVE-2026-109353

References

• https://github.com/librenms/librenms/security/advisories/GHSA-2pw7-8mmj-gcw5
• https://www.vulncheck.com/advisories/librenms-before-26.9.0-sql-injection-via-notification-id-in-notifications-inc-php
• https://github.com/librenms/librenms/security/advisories/GHSA-2pw7-8mmj-gcw5

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.