Where
-Infinity
0

Trending

Last week
Last month
Last year

Cacti CactiCacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2026-71287

Cacti CactiCacti: Package Import Signature Validation Bypass Allows Self-Signed Packages

Risk 40
Severity
7.1
First published (updated )
CVE-2026-40941

Cacti CactiCacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter

Risk 38
Severity
6.5
First published (updated )
CVE-2026-40084

Cacti CactiCacti: SQL Injection in managers.php

Risk 66
Severity
7.2
First published (updated )
CVE-2026-40083

CactiCacti: Session Fixation via missing session_regenerate_id() after login

Risk 34
Severity
5.4
First published (updated )
CVE-2026-40082
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cacti CactiCacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect

Risk 38
Severity
6.1
First published (updated )
CVE-2026-40080

Cacti CactiCacti: Command Injection via escape_command() no-op in RRDtool execution

Risk 86
Severity
8.6
First published (updated )
CVE-2026-40079

Cacti CactiCacti: Stored SQL Injection via graph_name_regexp in Reports feature

Risk 79
Severity
8.8
First published (updated )
CVE-2026-39951

Cacti CactiCacti has SQL Injection via rfilter parameter in RLIKE clauses

Risk 86
Severity
9.3
First published (updated )
CVE-2026-39948

Cacti CactiCacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php

Risk 86
Severity
9.8
First published (updated )
CVE-2026-39955
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cacti CactiCacti: Unauthenticated RCE on Graph Image

Risk 86
Severity
9.8
First published (updated )
CVE-2026-39938

Cacti CactiCacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context

Risk 38
Severity
5.3
First published (updated )
CVE-2026-39900

Cacti CactiCacti: Path Traversal via filename parameter in package_import.php

Risk 33
Severity
6.9
First published (updated )
CVE-2026-39899

Cacti CactiCacti has a Reflected XSS Vulnerability via html_auth_footer

Risk 38
Severity
5.3
First published (updated )
CVE-2026-39897

Cacti CactiCacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting

Risk 16
Severity
2.9
First published (updated )
CVE-2026-39894
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cacti CactiCacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php

Risk 86
Severity
9.8
First published (updated )
CVE-2026-39893

CVE-2026-39949: Authenticated Remote Code Execution in Cacti ≤ 1.2.30

First published (updated )
Social
reddit

Cacti CactiA HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a fi…

Risk 34
Severity
5.4
First published (updated )
CVE-2025-45160

Cacti CactiSNMP Command Injection leads to RCE in Cacti

Risk 79
Severity
8.8
First published (updated )
CVE-2025-66399

Cacti CactiCacti graph_view.php RCE via graph_start Parameter Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2005-10004
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cacti CactiSQL Injection

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2025-26520

Cacti CactiCacti XSS vulnerability in display_settings

Risk 38
Severity
6.1
First published (updated )
CVE-2024-30268

Cacti CactiCacti command injection in cmd_realtime.php

Risk 87
Severity
10
First published (updated )
CVE-2024-29895

Cacti CactiCacti has incomplete fix for CVE-2023-39515

Risk 45
Severity
6.1
First published (updated )
CVE-2023-49088

Cacti CactiCacti SQL Injection vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2023-49085
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cacti CactiLocal File Inclusion (RCE) in Cacti

Risk 79
Severity
8.8
First published (updated )
CVE-2023-49084

Cacti CactiUnauthenticated Command Injection

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2022-46169

Fedoraproject FedoraOS Command Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2020-8813

Cacti CactiOS Command Injection

Risk 78
Severity
8.8
First published (updated )
CVE-2020-7237

Fedoraproject Extra Packages For Enterprise LinuxXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-7106
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203