CVE-2020-28872: Monitorr

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows an unauthorized person to create valid credentials.

Affected products

• Monitorr Monitorr: version 1.7.6m only

Published 2021-04-12. Last modified 2026-06-17.