A vulnerability described as critical has been identified in LibreNMS up to 26.1.x. This affects an unknown function of the file address-search.inc.php. The manipulation of the argument address results in sql injection.
This vulnerability was named CVE-2026-26990. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
