Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-7226-1 1 CVE

cacti vulnerability

Published Jan 23, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Cacti did not properly sanitize the 'poller_id'
parameter in the "remote_agent.php" file. A remote attacker could
possibly use this issue to achieve remote code execution.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS cacti 1.1.38+ds1-1ubuntu0.1~esm4
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS cacti 1.2.10+ds1-1ubuntu1.1+esm2
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS cacti 1.2.19+ds1-2ubuntu1.1+esm2

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-46169 Exploited Public exploit Scanner template EPSS 100%

    Unauthenticated Command Injection

    Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a serve…

    Cacti cacti cacti cacti Debian Ubuntu
    KEV Feb 16, 2023

References

  • report
    https://ubuntu.com/security/CVE-2022-46169