Skip to content
OpenAdvisories

Package · Alpine

cacti

55 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-22604 Public exploit

    Cacti has Authenticated RCE via multi-line SNMP responses

    Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ss_net_snmp_disk_io() or ss_net_snmp_disk_bytes(), a part of e…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2024-34340

    Authentication Bypass when using using older password hashes

    Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, Cacti calls `compat_password_hash` when users set their password. `compat_password_hash` use `password_hash` if there is it, else use `md5`. When verifying passw…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2024-25641 Public exploit EPSS 86%

    Cacti RCE vulnerability when importing packages

    Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to e…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2023-39361 Public exploit Scanner template EPSS 89%

    Unauthenticated SQL Injection in graph_view.php in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are bei…

    Cacti cacti cacti cacti Debian Ubuntu Alpine