← Database

CVE-2024-51092

CRITICAL CVSS: 9.1 Published: 2026-05-08 Modified: 2026-06-17

Description

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's initRrdDirectory().

Affected Platforms

Librenms Librenms

Weakness Type

CWE-78

References