Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:04:19 +0000 CVE-2026-108715 — LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php https://db.gcve.eu/vuln/cve-2026-108715 <p><strong>Affected:</strong> librenms</p> <p>LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokeping_in or smokeping_out graphs with arbitrary device ids to view latency data and enumerate device names.</p> <p><strong>Affected:</strong> librenms</p> <p>LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokeping_in or smokeping_out graphs with arbitrary device ids to view latency data and enumerate device names.</p> https://db.gcve.eu/vuln/cve-2026-108715