CVE-2026-30480: Path Traversal
A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30480?
CVE-2026-30480 is considered a high severity vulnerability due to its potential for enabling remote code execution through Local File Inclusion.
How do I fix CVE-2026-30480?
To resolve CVE-2026-30480, users should upgrade to a patched version of LibreNMS that addresses this specific vulnerability.
Who is affected by CVE-2026-30480?
CVE-2026-30480 affects users running LibreNMS version 22.11.0-23-gd091788f2 who have access to the NFSen module.
What type of vulnerability is CVE-2026-30480?
CVE-2026-30480 is classified as a Local File Inclusion (LFI) vulnerability.
What can attackers achieve with CVE-2026-30480?
Attackers exploiting CVE-2026-30480 can include arbitrary PHP files from the server filesystem, leading to potential unauthorized access or code execution.