CVE-2024-51092: LibreNMS has an Authenticated OS Command Injection

Severity: Critical

CVSS Score: 9.1

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's initRrdDirectory().