Quick answers
- Is CVE-2020-15876 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2020-15876 being exploited in the wild.
- How severe is CVE-2020-15876?
- High severity, with a CVSS score of 8.8, published 26 August 2026.
- Which products and versions are affected?
- Librenms 1.65.
- Is there a fix for CVE-2020-15876?
- A patch was published on 2020-07-10. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2020-15876 attacked?
- It is attacked over the network.
- Am I affected by CVE-2020-15876?
- Check whether you run Librenms at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A SQL injection vulnerability exists in LibreNMS 1.65 within the /ajax_table.php API endpoint, specifically in the sort parameter processing. The vulnerability affects at least 23 table include files in the includes/html/table directory including address-search, alertlog, arp-search, bills, device inventory, and sensors. The vulnerable code fails to properly sanitize user-supplied input in the sort parameter before including it in SQL queries. An authenticated attacker with normal user privileges can craft malicious SQL syntax in the sort parameter to extract arbitrary data from the LibreNMS database. The fix was implemented in version 1.65.1 (committed July 10, 2020) by properly escaping and validating the sort parameter.
Affected products
- LibreNMS LibreNMS 1.65
Timeline
- 2020-07-10: disclosed
- 2020-07-10: patched