Cacti
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 170 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 20, 2007 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection
Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages
Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter
Cacti: SQL Injection in managers.php
Cacti: Session Fixation via missing session_regenerate_id() after login
Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect
Cacti: Command Injection via escape_command() no-op in RRDtool execution
Cacti: Stored SQL Injection via graph_name_regexp in Reports feature
Cacti has SQL Injection via rfilter parameter in RLIKE clauses
Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php
Monitor Cacti in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.