CVE-2026-108715: LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php

Q: Who can exploit this issue?

An authenticated restricted LibreNMS user who is permitted to access at least one Smokeping probe device can exploit it. The issue does not require user interaction.

Q: What information can an attacker access?

The attacker can request smokeping_in or smokeping_out graphs using arbitrary device IDs. This can expose latency data for target devices and allow enumeration of device names.

Q: How can I determine whether a user may be affected?

Review restricted users that have permission on Smokeping probe devices and determine whether they can request smokeping_in or smokeping_out graphs. Such users may be able to supply device IDs for devices outside their authorized scope.

Published Oct 11, 2026

Updated

LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokepingin or smokepingout graphs with arbitrary device ids to view latency data and enumerate device names.

Affected Software

1 affected component

librenms librenms<=26.9.1.1

Event History

Oct 11, 2026

CVE Published

via MITRE·12:19 PM

Data Sourced

via MITRE·12:19 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated restricted LibreNMS user who is permitted to access at least one Smokeping probe device can exploit it. The issue does not require user interaction.

What information can an attacker access?

The attacker can request smokeping_in or smokeping_out graphs using arbitrary device IDs. This can expose latency data for target devices and allow enumeration of device names.

How can I determine whether a user may be affected?

Review restricted users that have permission on Smokeping probe devices and determine whether they can request smokeping_in or smokeping_out graphs. Such users may be able to supply device IDs for devices outside their authorized scope.

CVE-2026-108715: LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What information can an attacker access?

How can I determine whether a user may be affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What information can an attacker access?

How can I determine whether a user may be affected?