https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 04:10:50 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-109355 <p>LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped. Attackers controlling the Oxidized response or a device&#39;s SNMP sysName can inject script that executes in browsers of users viewing the Tools Oxidized page.</p> <p>LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped. Attackers controlling the Oxidized response or a device&#39;s SNMP sysName can inject script that executes in browsers of users viewing the Tools Oxidized page.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109355 https://db.gcve.eu/vuln/ghsa-m63v-9j9m-6j88 <p>LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped. Attackers controlling the Oxidized response or a device&#39;s SNMP sysName can inject script that executes in browsers of users viewing the Tools Oxidized page.</p> <p>LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped. Attackers controlling the Oxidized response or a device&#39;s SNMP sysName can inject script that executes in browsers of users viewing the Tools Oxidized page.</p> https://db.gcve.eu/vuln/ghsa-m63v-9j9m-6j88