CVE-2020-36969

HIGH 8.8CVE-2020-36969 · Published 28/01/2026 · updated 17/06/2026

In short

CVE-2020-36969 is a HIGH (CVSS 8.8) vulnerability affecting m/monit (tildeslash).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 42.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
m/monit tildeslash	`= 3.7.4`	No fix yet

Description

M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.

References

mmonit.com · Product
exploit-db.com/exploits/49080 · Exploit
vulncheck.com/advisories/mmonit-privilege-escalation · Third Party Advisory

More vulnerabilities in m/monit

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free