Cacti
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 172 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 20, 2007 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Cacti: User Enumeration via Error Messages
Cacti: Authenticated RCE on Data Input
Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)
Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages
Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter
Cacti: SQL Injection in managers.php
Cacti: Session Fixation via missing session_regenerate_id() after login
Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect
Cacti: Command Injection via escape_command() no-op in RRDtool execution
Cacti: Stored SQL Injection via graph_name_regexp in Reports feature
Monitor Cacti in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.