https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T15:05:14.619789+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109352 CVE-2026-109352 — LibreNMS before 26.9.0 Stored XSS via wireless sensor description 2026-10-22T15:05:14.621107+00:00

Affected: librenms

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored device's SNMP agent can set values such as AI-AP-MIB::aiSSID to malicious JavaScript that executes when authenticated users view the device's Wireless tab, enabling session hijacking.