SQL Injection

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. SQL Injection in librenms/librenmsCVE-2023-5591librenms · CVSS 7.8 · 24% likely

   CWE-89

2. LibreNMS's Time-Based Blind SQL injection leads to database extractionCVE-2024-32480librenms · CVSS 7.2 · 20% likely

   CWE-89

3. LibreNMS vulnerable to time-based SQL injection that leads to database extractionCVE-2024-32461librenms · CVSS 7.1 · 19% likely

   CWE-89

4. LibreNMS: SQL Injection in ajax_table.php spreads through a covert data streamCVE-2026-26988librenms · CVSS 9.3 · 8.4% likely

   CWE-89

5. LibreNMS has Time-Based Blind SQL Injection in address-search.inc.phpCVE-2026-26990librenms · CVSS 8.8 · 4.5% likely

   CWE-89

6. LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpointCVE-2025-65093librenms · CVSS 5.5 · 3.9% likely

   CWE-89

7. LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL InjectionCVE-2020-36947LibreNMS · CVSS 7.1 · 0.5% likely

   CWE-89

8. An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in…CVE-2020-15875LibreNMS · CVSS 5 · 0.5% likely

   CWE-89

9. LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.phpCVE-2026-109353librenms · CVSS 7.1 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.