High severity · published Aug 26, 2026
CVE-2026-80214
LibreNMS Virtualisation Discovery Module RCE
8.6
CVSS
0.5%
EPSS
No
On KEV
Description
LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
librenms · librenms
23.10.0 before 26.4.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-80214
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-80214
github.com
https://github.com/librenms/librenms/security/advisories/GHSA-7hmq-j399-mqwf
projectblack.io
https://projectblack.io/blog/librenms-authenticated-rce-26-5-0/#rce-by-command-line-injection-2641
More from librenms
9.8
CVE-2026-86426
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
9.8
CVE-2022-4070
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0
9.8
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters
9.8
CVE-2021-44278
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php
9.8
CVE-2019-10665
An issue was discovered in LibreNMS through 1.47