Skip to content
OpenAdvisories
Critical 1 exploited CVE DSA-5298-1 2 CVEs

cacti - security update

Published Dec 9, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 cacti 1.2.16+ds1-2+deb11u1

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-46169 Exploited Public exploit Scanner template EPSS 100%

    Unauthenticated Command Injection

    Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a serve…

    Cacti cacti cacti cacti Debian Ubuntu
    KEV Feb 16, 2023
  • Unscored —
    CVE-2022-0730

    Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.

    cacti cacti cacti Debian Ubuntu Alpine