Skip to content
OpenAdvisories
Critical 1 exploited CVE DLA-3252-1 5 CVEs

cacti - security update

Published Dec 31, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 cacti 1.2.2+ds1-2+deb10u5

Vulnerabilities 5

  • Critical 9.8
    CVE-2022-46169 Exploited Public exploit Scanner template EPSS 100%

    Unauthenticated Command Injection

    Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a serve…

    Cacti cacti cacti cacti Debian Ubuntu
    KEV Feb 16, 2023
  • Medium 5.4
    CVE-2020-25706

    A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of er…

    The Cacti Group cacti cacti cacti Debian Ubuntu
  • Unscored —
    CVE-2020-23226

    Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.p…

    cacti cacti Debian Ubuntu
  • Unscored —
    CVE-2020-8813 Public exploit Scanner template EPSS 74%

    graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in …

    cacti cacti cacti Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-0730

    Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.

    cacti cacti cacti Debian Ubuntu Alpine