# cve.now: Cacti

The newest entries naming Cacti as an affected vendor (up to 200), of 68 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-49442](https://cve.now/CVE-2026-49442.md): Cacti: User Enumeration via Error Messages (CVSS 5.3)
- [CVE-2026-39902](https://cve.now/CVE-2026-39902.md): Cacti: Authenticated RCE on Data Input (CVSS 7.2)
- [CVE-2026-46531](https://cve.now/CVE-2026-46531.md): Cacti: Authenticated Stored 2nd-Order SQL Injection in automation\_tree\_rule\_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368) (CVSS 5.5)
- [CVE-2026-71287](https://cve.now/CVE-2026-71287.md): Cacti sanitize\_sql\_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection (CVSS 8.8)
- [CVE-2026-40941](https://cve.now/CVE-2026-40941.md): Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages (CVSS 7.1)
- [CVE-2026-40084](https://cve.now/CVE-2026-40084.md): Cacti: Arbitrary File Read via Path Traversal in Report \`format\_file\` Parameter (CVSS 6.5)
- [CVE-2026-40083](https://cve.now/CVE-2026-40083.md): Cacti: SQL Injection in managers.php (CVSS 7.2)
- [CVE-2026-40082](https://cve.now/CVE-2026-40082.md): Cacti: Session Fixation via missing session\_regenerate\_id() after login (CVSS 5.4)
- [CVE-2026-40080](https://cve.now/CVE-2026-40080.md): Cacti: Open Redirect via HTTP\_REFERER substring check in auth\_login\_redirect (CVSS 6.1)
- [CVE-2026-40079](https://cve.now/CVE-2026-40079.md): Cacti: Command Injection via escape\_command() no-op in RRDtool execution (CVSS 8.6)
- [CVE-2026-39951](https://cve.now/CVE-2026-39951.md): Cacti: Stored SQL Injection via graph\_name\_regexp in Reports feature (CVSS 7.6)
- [CVE-2026-39948](https://cve.now/CVE-2026-39948.md): Cacti has SQL Injection via rfilter parameter in RLIKE clauses (CVSS 9.3)
- [CVE-2026-39955](https://cve.now/CVE-2026-39955.md): Cacti has Pre-Authentication SQL Injection via unanchored FILTER\_VALIDATE\_REGEXP in graph\_view.php (CVSS 9.8)
- [CVE-2026-39938](https://cve.now/CVE-2026-39938.md): Cacti: Unauthenticated RCE on Graph Image (CVSS 9.8)
- [CVE-2026-39900](https://cve.now/CVE-2026-39900.md): Cacti: Reflected XSS via tab parameter in auth\_profile.php JavaScript context (CVSS 5.3)
- [CVE-2026-39899](https://cve.now/CVE-2026-39899.md): Cacti: Path Traversal via filename parameter in package\_import.php (CVSS 6.9)
- [CVE-2026-39897](https://cve.now/CVE-2026-39897.md): Cacti has a Reflected XSS Vulnerability via html\_auth\_footer (CVSS 5.3)
- [CVE-2026-39894](https://cve.now/CVE-2026-39894.md): Cacti: RRDtool metric shift via LC\_NUMERIC locale comma decimal formatting (CVSS 2.9)
- [CVE-2026-39893](https://cve.now/CVE-2026-39893.md): Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph\_view.php (CVSS 9.8)
- [CVE-2025-66399](https://cve.now/CVE-2025-66399.md): SNMP Command Injection leads to RCE in Cacti (CVSS 7.4)
- [CVE-2025-26520](https://cve.now/CVE-2025-26520.md): Cacti through 1.2.29 allows SQL injection in the template function in host\_templates.php via the graph\_template parameter. (CVSS 7.6)
- [CVE-2025-24368](https://cve.now/CVE-2025-24368.md): Cacti has a SQL Injection vulnerability when using tree rules through Automation API (CVSS 6.9)
- [CVE-2025-24367](https://cve.now/CVE-2025-24367.md): Cacti allows Arbitrary File Creation leading to RCE (CVSS 8.7)
- [CVE-2025-22604](https://cve.now/CVE-2025-22604.md): Cacti has Authenticated RCE via multi-line SNMP responses (CVSS 9.1)
- [CVE-2024-54145](https://cve.now/CVE-2024-54145.md): Cacti has a SQL Injection vulnerability when request automation devices (CVSS 6.3)
- [CVE-2024-54146](https://cve.now/CVE-2024-54146.md): Cacti has a SQL Injection vulnerability when view host template (CVSS 7.6)
- [CVE-2024-45598](https://cve.now/CVE-2024-45598.md): Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path (CVSS 6.0)
- [CVE-2024-43363](https://cve.now/CVE-2024-43363.md): Remote code execution via Log Poisoning in Cacti (CVSS 7.2)
- [CVE-2024-43365](https://cve.now/CVE-2024-43365.md): Stored Cross-site Scripting (XSS) when creating external links in Cacti (CVSS 5.7)
- [CVE-2024-43364](https://cve.now/CVE-2024-43364.md): Stored Cross-site Scripting (XSS) when creating external links in Cacti (CVSS 5.7)
- [CVE-2024-43362](https://cve.now/CVE-2024-43362.md): Stored Cross-site Scripting (XSS) when creating external links in Cacti (CVSS 7.3)
- [CVE-2024-34340](https://cve.now/CVE-2024-34340.md): Authentication Bypass when using using older password hashes (CVSS 9.1)
- [CVE-2024-31460](https://cve.now/CVE-2024-31460.md): Cacti SQL Injection vulnerability in lib/api\_automation.php caused by reading dirty data stored in database (CVSS 6.5)
- [CVE-2024-31459](https://cve.now/CVE-2024-31459.md): Cacti RCE vulnerability by file include in lib/plugin.php (CVSS 8.1)
- [CVE-2024-31458](https://cve.now/CVE-2024-31458.md): Cacti SQL Injection vulnerability in lib/html\_form\_templates.php by reading dirty data stored in database (CVSS 4.6)
- [CVE-2024-31445](https://cve.now/CVE-2024-31445.md): SQL Injection vulnerability in automation\_get\_new\_graphs\_sql (CVSS 8.8)
- [CVE-2024-31444](https://cve.now/CVE-2024-31444.md): Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database (CVSS 4.6)
- [CVE-2024-31443](https://cve.now/CVE-2024-31443.md): Cacti XSS vulnerability in lib/html\_tree.php by reading dirty data stored in database (CVSS 5.7)
- [CVE-2024-30268](https://cve.now/CVE-2024-30268.md): Cacti XSS vulnerability in display\_settings (CVSS 6.1)
- [CVE-2024-29895](https://cve.now/CVE-2024-29895.md): Cacti command injection in cmd\_realtime.php (CVSS 10.0)
- [CVE-2024-29894](https://cve.now/CVE-2024-29894.md): Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API (CVSS 5.4)
- [CVE-2024-27082](https://cve.now/CVE-2024-27082.md): Cacti Cross-site Scripting vulnerability when managing trees (CVSS 7.6)
- [CVE-2024-25641](https://cve.now/CVE-2024-25641.md): Cacti RCE vulnerability when importing packages (CVSS 9.1)
- [CVE-2023-51448](https://cve.now/CVE-2023-51448.md): SQL Injection vulnerability when managing SNMP Notification Receivers (CVSS 8.8)
- [CVE-2023-50250](https://cve.now/CVE-2023-50250.md): Cross-Site Scripting vulnerability when Import xml template file (CVSS 5.4)
- [CVE-2023-49088](https://cve.now/CVE-2023-49088.md): Cacti has incomplete fix for CVE-2023-39515 (CVSS 6.1)
- [CVE-2023-49085](https://cve.now/CVE-2023-49085.md): Cacti SQL Injection vulnerability (CVSS 8.8)
- [CVE-2023-49086](https://cve.now/CVE-2023-49086.md): Cacti is vulnerable to cross-Site scripting (XSS) DOM (CVSS 5.4)
- [CVE-2023-49084](https://cve.now/CVE-2023-49084.md): Local File Inclusion (RCE) in Cacti (CVSS 8.1)
- [CVE-2023-39511](https://cve.now/CVE-2023-39511.md): Stored Cross-Site-Scripting on reports\_admin.php device name in Cacti (CVSS 6.1)
- [CVE-2023-30534](https://cve.now/CVE-2023-30534.md): Insecure Deserialization in Cacti (CVSS 4.3)
- [CVE-2023-31132](https://cve.now/CVE-2023-31132.md): Cacti Privilege Escalation (CVSS 7.8)
- [CVE-2023-39362](https://cve.now/CVE-2023-39362.md): Authenticated command injection in SNMP options of a Device (CVSS 7.2)
- [CVE-2023-39364](https://cve.now/CVE-2023-39364.md): Open redirect in change password functionality in Cacti (CVSS 3.5)
- [CVE-2023-39516](https://cve.now/CVE-2023-39516.md): Stored Cross-Site-Scripting on data\_sources.php debug html-block in Cacti (CVSS 6.1)
- [CVE-2023-39365](https://cve.now/CVE-2023-39365.md): Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti (CVSS 4.6)
- [CVE-2023-39357](https://cve.now/CVE-2023-39357.md): A Defect in sql\_save() Causes Multiple SQL Injection Vulnerabilities in Cacti (CVSS 8.8)
- [CVE-2023-39358](https://cve.now/CVE-2023-39358.md): Authenticated SQL injection vulnerability in reports\_user.php in Cacti (CVSS 8.8)
- [CVE-2023-39359](https://cve.now/CVE-2023-39359.md): Authenticated SQL injection vulnerability in graphs.php in Cacti (CVSS 8.8)
- [CVE-2023-39361](https://cve.now/CVE-2023-39361.md): Unauthenticated SQL Injection in graph\_view.php in Cacti (CVSS 9.8)
- [CVE-2023-39360](https://cve.now/CVE-2023-39360.md): Reflected Cross-site Scripting in graphs\_new.php in Cacti (CVSS 6.1)
- [CVE-2023-39366](https://cve.now/CVE-2023-39366.md): Stored Cross-site Scripting in data\_sources.php through Device-Name in 'select' input in Cacti (CVSS 6.1)
- [CVE-2023-39510](https://cve.now/CVE-2023-39510.md): Stored Cross-site Scripting in reports\_admin.php through Device-Name in 'select' input in Cacti (CVSS 6.1)
- [CVE-2023-39512](https://cve.now/CVE-2023-39512.md): Stored Cross-site Scripting on data\_sources.php device name view in Cacti (CVSS 6.1)
- [CVE-2023-39513](https://cve.now/CVE-2023-39513.md): Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti (CVSS 6.1)
- [CVE-2023-39515](https://cve.now/CVE-2023-39515.md): Stored Cross-site Scripting on data\_debug.php datasource path view in Cacti (CVSS 6.1)
- [CVE-2023-39514](https://cve.now/CVE-2023-39514.md): Stored Cross-site Scripting on graphs.php data template formated name view in Cacti (CVSS 6.1)
- [CVE-2022-46169](https://cve.now/CVE-2022-46169.md): Unauthenticated Command Injection (CVSS 9.8, KEV)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/cacti
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.