Medium severity · published Jan 27, 2026
CVE-2020-36947
LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve sensitive database contents through time-based blind SQL injection.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
LibreNMS · LibreNMS
1.46 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-36947
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-36947
exploit
https://www.exploit-db.com/exploits/49246
product
https://www.librenms.org
product
https://github.com/librenms/librenms
product
https://community.librenms.org/
third-party-advisory
https://www.vulncheck.com/advisories/librenms-mac-accounting-graph-authenticated-sql-injection
More from LibreNMS
9.8
CVE-2026-86426
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
9.8
CVE-2022-4070
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0
9.8
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters
9.8
CVE-2021-44278
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php
9.8
CVE-2019-10665
An issue was discovered in LibreNMS through 1.47