RCE in Librenms

CVE-2026-80214

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.004 (34.8th percentile) — read the EPSS interpretation.