Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-86426— LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

Quick assessment

Affected
librenms librenms
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

以下是该漏洞描述的中文翻译： LibreNMS 26.8.0 之前的版本在 REST API 中存在一个认证绕过漏洞。未认证的 attackers 可以通过发送数值而非字符串令牌来访问受保护的端点。攻击者可以利用 MySQL 的类型强制转换特性，通过发送 0 到 9 之间的小整数来匹配令牌哈希值，从而获得 API 功能的访问权限，包括设备凭证和管理功能，这些功能可通过告警模板实现远程代码执行。

CVSS 9.2 · Critical

Affected Version Matrix 2

VendorProduct Version RangeStatus
librenms librenms < 26.8.0 affected
26.8.0 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-86426

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
Source: CVE Program / CVE List V5
Vulnerability Description
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to match token hashes, gaining access to API functionality including device credentials and administrative features that enable remote code execution through alert templates.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
librenms librenms 0 ~ 26.8.0 -

II. Public POCs for CVE-2026-86426

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-86426

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-86426 (2)

IV. Related Vulnerabilities

Same product: librenms
Same vendor: librenms
Same weakness: CWE-287

V. Comments for CVE-2026-86426

No comments yet

Leave a comment