LibreNMS CVE-2026-86426 - Full Audit & Recon Tool

📌 Description

This tool is a Proof of Concept (PoC) and reconnaissance framework for the vulnerability CVE-2026-86426 (Authentication Bypass via Type Confusion) in LibreNMS.

It demonstrates how an unauthenticated attacker can:

1. Bypass API authentication via the payload {"api_token": [0]}.
2. Extract SNMP credentials (v2c/v3) from all monitored devices.
3. Reconstruct the network topology via SNMP (LLDP/ARP).
4. Detect known CVEs on MikroTik devices.
5. Attempt to retrieve configurations via Oxidized.

⚠️ Warning

Use ONLY on systems you are authorized to test. The author accepts no liability for illegal use.

🚀 Usage

# 1. Install the dependencies
sudo apt install snmp
pip install requests

# 2. Edit the script to set your target
# TARGET = "http://your-local-lab"

# 3. Run the audit
python3 librenms_full_audit.py