Do Son Cacti vulnerabilities in 1.2.30 include pre-auth SQL injection and LFI, both CVSS 9.8 (CVE-2026-39955, CVE-2026-39938). Update to 1.2.31 now.
Cacti
A High-severity RCE flaw (CVE-2025-66399) in Cacti allows authenticated attackers to execute commands by injecting newline characters into the SNMP Community String. Update to v1.2.29 immediately.
Stay informed about the critical vulnerability CVE-2025-22604 in Cacti network monitoring software. Learn how this flaw could allow code execution and compromise sensitive data.
Stay secure with the latest update for Cacti. Version 1.2.28 addresses critical vulnerabilities, including CVE-2024-43363, a Remote Code Execution flaw.
Cacti has recently released a crucial security update to address two significant vulnerabilities (CVE-2024-29895 & CVE-2024-30268)
Among the most alarming vulnerabilities addressed in this update is CVE-2024-25641, with a CVSS score of 9.1.
This vulnerability, designated as CVE-2023-39361, is a grave SQL injection bug, sporting a worrisome CVSS score of 9.8.
CVE-2022-46169 is a command injection vulnerability that allows unauthenticated attackers to execute arbitrary code on a server running Cacti