CA
Product
cacti
On CISA KEVExploited in the wild
156
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 11High 43Medium 63Low 1
Watch
Add cacti to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40941 | 6.5 | Jun 25 | Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages Affected: < 1.2.31 |
| CVE-2026-40084 | 6.5 | Jun 25 | Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter Affected: < 1.2.31 |
| CVE-2023-46490 | 6.5 | Oct 27 | SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php function Affected: 1.2.25 |
| CVE-2020-13231 | 6.5 | May 20 | In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change Affected: before 1.2.11 |
| CVE-2019-17357 | 6.5 | Jan 21 | Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are… Affected: through 1.2.7 |
| CVE-2023-39365 | 6.3 | Sep 5 | Cacti is an open source operational monitoring and fault management framework Affected: before 1.2.25 |
| CVE-2026-40080 | 6.1 | Jun 25 | Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect Affected: < 1.2.31 |
| CVE-2026-39900 | 6.1 | Jun 24 | Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context Affected: < 1.2.31 |
| CVE-2026-39897 | 6.1 | Jun 24 | Cacti has a Reflected XSS Vulnerability via html_auth_footer Affected: < 1.2.31 |
| CVE-2023-50250 | 6.1 | Dec 22 | Cacti is an open source operational monitoring and fault management framework Affected: 1.2.25 |
| CVE-2023-39360 | 6.1 | Sep 5 | Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an… Affected: 1.2.24 |
| CVE-2022-48547 | 6.1 | Aug 22 | A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref"… Affected: through 0.8.7g |
| CVE-2022-41444 | 6.1 | Aug 22 | Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php Affected: 1.2.21 |
| CVE-2021-26247 | 6.1 | Jan 19 | As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in… Affected: 0.8.7g |
| CVE-2020-14424 | 6.1 | Nov 14 | Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme Affected: before 1.2.18 |
| CVE-2020-23226 | 6.1 | Aug 27 | Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5)… Affected: 1.2.12 |
| CVE-2020-25706 | 6.1 | Nov 12 | A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path… Affected: 1.2.13 |
| CVE-2020-7106 | 6.1 | Jan 16 | Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as… Affected: before 1.2.9 |
| CVE-2017-16785 | 6.1 | Nov 10 | Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php Affected: 1.1.27 |
| CVE-2017-15194 | 6.1 | Oct 11 | include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page Affected: 1.1.25 |
| CVE-2017-12927 | 6.1 | Aug 18 | A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php Affected: 1.1.17 |
| CVE-2017-1000032 | 6.1 | Jul 17 | Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parent_id parameter to tree.php and drp_action… Affected: 0.8.8b |
| CVE-2026-46531 New | 5.5 | Oct 23 | Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368) Affected: >= 1.2.27, < 1.2.31 |
| CVE-2026-40082 | 5.4 | Jun 25 | Cacti: Session Fixation via missing session_regenerate_id() after login Affected: < 1.2.31 |
| CVE-2024-43362 | 5.4 | Oct 7 | Cacti is an open source performance and fault management framework Affected: before 1.2.28 |
| CVE-2024-31444 | 5.4 | May 14 | Cacti provides an operational monitoring and fault management framework Affected: before 1.2.27 |
| CVE-2024-31443 | 5.4 | May 14 | Cacti provides an operational monitoring and fault management framework Affected: before 1.2.27 |
| CVE-2024-27082 | 5.4 | May 14 | Cacti provides an operational monitoring and fault management framework Affected: before 1.2.27 |
| CVE-2023-49086 | 5.4 | Dec 22 | Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB) Affected: 1.2.25 |
| CVE-2023-39364 | 5.4 | Sep 5 | Cacti is an open source operational monitoring and fault management framework Affected: 1.2.24 |
| CVE-2023-39514 | 5.4 | Sep 5 | Cacti is an open source operational monitoring and fault management framework Affected: before 1.2.25 |
| CVE-2023-39513 | 5.4 | Sep 5 | Cacti is an open source operational monitoring and fault management framework Affected: before 1.2.25 |
| CVE-2021-3816 | 5.4 | Jan 19 | Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at… Affected: 1.1.38 |
| CVE-2021-23225 | 5.4 | Jan 19 | Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via… Affected: 1.1.38 |
| CVE-2019-11025 | 5.4 | Apr 8 | In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache,… Affected: before 1.2.3 |
| CVE-2018-20726 | 5.4 | Jan 16 | A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field… Affected: before 1.2.0 |
| CVE-2018-10061 | 5.4 | Apr 12 | Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not… Affected: through 1.1.36 |
| CVE-2018-10060 | 5.4 | Apr 12 | Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php Affected: through 1.1.36 |
| CVE-2018-10059 | 5.4 | Apr 12 | Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to determine a page name Affected: through 1.1.36 |
| CVE-2017-12978 | 5.4 | Aug 21 | lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user Affected: through 1.1.17 |
| CVE-2017-12066 | 5.4 | Aug 1 | Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTML via specially… Affected: through 1.1.15 |
| CVE-2017-11691 | 5.4 | Jul 27 | Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer… Affected: 1.1.13 |
| CVE-2017-11163 | 5.4 | Jul 10 | Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted… Affected: 1.1.12 |
| CVE-2017-10970 | 5.4 | Jul 6 | Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the… Affected: 1.1.12 |
| CVE-2026-49442 New | 5.3 | Oct 23 | Cacti: User Enumeration via Error Messages Affected: < 1.2.31 |
| CVE-2026-39899 | 5.3 | Jun 24 | Cacti: Path Traversal via filename parameter in package_import.php Affected: < 1.2.31 |
| CVE-2022-48538 | 5.3 | Aug 22 | In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap_auth() allows a zero as the password Affected: 1.2.19 |
| CVE-2024-45598 | 4.9 | Jan 27 | Cacti is an open source performance and fault management framework Affected: before 1.2.29 |
| CVE-2017-16661 | 4.9 | Nov 8 | Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as… Affected: 1.1.27 |
| CVE-2023-49088 | 4.8 | Dec 22 | Cacti is an open source operational monitoring and fault management framework Affected: before 1.2.25 |