CVE-2026-108715— LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
Quick assessment
Affected
librenms librenms
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
LibreNMS 版本 26.9.1.1 及更早版本在 文件中存在授权绕过漏洞。该漏洞错误地检查了源探测设备（src probe device），而非渲染的目标设备（rendered target device）。因此，被允许访问某个探测设备的受限用户，可以通过传入任意的设备 ID 请求 或 类型的流量图，从而查看延迟数据并枚举设备名称。
Possible ATT&CK Techniques 3 AI
T1083 · File and Directory Discovery T1592 · Gather Victim Host Information T1528 · Steal Application Access Token
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108715
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
Source: CVE Program / CVE List V5
Vulnerability Description
LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokeping_in or smokeping_out graphs with arbitrary device ids to view latency data and enumerate device names.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-108715
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108715
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-108715 (2)
-
🔗 librenms/LibreNMS/Util/Graph.php at 26.9.1.1 · librenms/librenms · GitHub technical-description
-
Vendor Advisories for CVE-2026-108715 (1)
Security Blog Posts for CVE-2026-108715 (1)
IV. Related Vulnerabilities
Same product: librenms
-
CVE-2020-15875
LibreNMS SQL注入漏洞 -
CVE-2026-86427
LibreNMS before 26.8.0 Argument Injection via graph_title -
CVE-2026-86426
LibreNMS before 26.8.0 Authentication Bypass via API Token T -
CVE-2026-84194
LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Host -
CVE-2026-84193
LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
Same vendor: librenms
-
CVE-2020-15875
LibreNMS SQL注入漏洞 -
CVE-2026-86427
LibreNMS before 26.8.0 Argument Injection via graph_title -
CVE-2026-86426
LibreNMS before 26.8.0 Authentication Bypass via API Token T -
CVE-2026-84194
LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Host -
CVE-2026-84193
LibreNMS through 26.2.0 Stored Cross-Site Scripting via SNMP
Same weakness: CWE-639
-
CVE-2026-108879
JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable -
CVE-2026-108864
iFlytek Astron Agent through 1.1.2 Authorization Bypass via -
CVE-2026-108862
APIPark through 1.9.7-beta IDOR via application authorizatio -
CVE-2026-108856
UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/ap -
CVE-2026-108854
Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appsp
V. Comments for CVE-2026-108715
No comments yet