CVE-2018-20678: Librenms

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.

Affected products

• Librenms Librenms: up to and including 1.47

Published 2019-03-28. Last modified 2026-06-17.