Cacti
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 169 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 20, 2007 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages
Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter
Cacti: SQL Injection in managers.php
Cacti: Session Fixation via missing session_regenerate_id() after login
Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect
Cacti: Command Injection via escape_command() no-op in RRDtool execution
Cacti: Stored SQL Injection via graph_name_regexp in Reports feature
Cacti has SQL Injection via rfilter parameter in RLIKE clauses
Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php
Cacti: Unauthenticated RCE on Graph Image
Monitor Cacti in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.