{"id":"CVE-2020-15875","title":"An issue was discovered in LibreNMS 1.65","summary":"An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajax_table.php API endp…","severity":"medium","cvss":5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cwe":["CWE-89"],"vendor":"LibreNMS","product":"LibreNMS","affected":["LibreNMS < 1.65.1"],"published":"2026-09-13","updated":"2026-09-22","sourceUpdated":"2026-09-22T19:56:19.073","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-15875","references":[{"url":"https://community.librenms.org/c/announcements","label":"cve@mitre.org"},{"url":"https://github.com/librenms/librenms/commit/32f72bc1ab7e980e4070e826a89d0d36a5ba62dd","label":"cve@mitre.org"},{"url":"https://github.com/librenms/librenms/compare/1.65...1.65.1","label":"cve@mitre.org"},{"url":"https://github.com/librenms/librenms/releases/tag/1.65.1","label":"cve@mitre.org"},{"url":"https://shielder.it/blog","label":"cve@mitre.org"},{"url":"https://www.shielder.com/advisories/librenms-searchphrase-authenticated-sql-injection/","label":"cve@mitre.org"},{"url":"https://www.shielder.com/advisories/librenms-searchphrase-authenticated-sql-injection/","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.0028,"epssPercentile":0.20704,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-14T14:30:22.654136Z"},"ingestedAt":"2026-09-14T15:23:07.420Z","slug":"CVE-2020-15875","body":"## Overview\n\nAn issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajax_table.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php, alertlog-stats.inc.php, alerts.inc.php, eventlog.inc.php, inventory.inc.php, ix-list.inc.php, ix-peers.inc.php, mempool-edit.inc.php, mempool.inc.php, poll-log.inc.php, processor-edit.inc.php, processor.inc.php, routing-edit.inc.php, sensors-common.inc.php, storage-edit.inc.php, storage.inc.php, and toner.inc.php (in includes/html/table). NOTE: some sources refer to this as CVE-2020-15876, but CVE-2020-15875 is the only correct CVE ID.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":27.5,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202680,"id":"CVE-2020-15875","ts":1789402174586,"field":"exploit_available","old":"false","new":"true"}]}