# cacti. Every CVE that names cacti among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Cacti: User Enumeration via Error Messages](https://agentprime.io/advisories/CVE-2026-49442.md) `CVE-2026-49442` · CVE record: Cacti cacti · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-204 - [Cacti: Authenticated RCE on Data Input](https://agentprime.io/advisories/CVE-2026-39902.md) `CVE-2026-39902` · CVE record: Cacti cacti · CVSS 7.2 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection - [Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)](https://agentprime.io/advisories/CVE-2026-46531.md) `CVE-2026-46531` · CVE record: Cacti cacti · CVSS 5.5 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: SQL injection - [Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection](https://agentprime.io/advisories/CVE-2026-71287.md) `CVE-2026-71287` · CVE record: Cacti cacti · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: SQL injection - [Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages](https://agentprime.io/advisories/CVE-2026-40941.md) `CVE-2026-40941` · CVE record: Cacti cacti · CVSS 7.1 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS - [Cacti: Arbitrary File Read via Path Traversal in Report \`format_file\` Parameter](https://agentprime.io/advisories/CVE-2026-40084.md) `CVE-2026-40084` · CVE record: Cacti cacti · CVSS 6.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Path traversal - [Cacti: SQL Injection in managers.php](https://agentprime.io/advisories/CVE-2026-40083.md) `CVE-2026-40083` · CVE record: Cacti cacti · CVSS 7.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: SQL injection - [Cacti: Session Fixation via missing session_regenerate_id() after login](https://agentprime.io/advisories/CVE-2026-40082.md) `CVE-2026-40082` · CVE record: Cacti cacti · CVSS 5.4 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Authentication bypass - [Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect](https://agentprime.io/advisories/CVE-2026-40080.md) `CVE-2026-40080` · CVE record: Cacti cacti · CVSS 6.1 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Open redirect - [Cacti: Command Injection via escape_command() no-op in RRDtool execution](https://agentprime.io/advisories/CVE-2026-40079.md) `CVE-2026-40079` · CVE record: Cacti cacti · CVSS 8.6 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Cacti: Stored SQL Injection via graph_name_regexp in Reports feature](https://agentprime.io/advisories/CVE-2026-39951.md) `CVE-2026-39951` · CVE record: Cacti cacti · CVSS 7.6 High · Not analysed yet · Published 24 Jun 2026 · Tags: SQL injection - [Cacti has SQL Injection via rfilter parameter in RLIKE clauses](https://agentprime.io/advisories/CVE-2026-39948.md) `CVE-2026-39948` · CVE record: Cacti cacti · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: SQL injection - [Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php](https://agentprime.io/advisories/CVE-2026-39955.md) `CVE-2026-39955` · CVE record: Cacti cacti · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: SQL injection - [Cacti: Unauthenticated RCE on Graph Image](https://agentprime.io/advisories/CVE-2026-39938.md) `CVE-2026-39938` · CVE record: Cacti cacti · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: Path traversal, Command injection - [Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context](https://agentprime.io/advisories/CVE-2026-39900.md) `CVE-2026-39900` · CVE record: Cacti cacti · CVSS 5.3 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Cross-site scripting (XSS) - [Cacti: Path Traversal via filename parameter in package_import.php](https://agentprime.io/advisories/CVE-2026-39899.md) `CVE-2026-39899` · CVE record: Cacti cacti · CVSS 6.9 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Path traversal - [Cacti has a Reflected XSS Vulnerability via html_auth_footer](https://agentprime.io/advisories/CVE-2026-39897.md) `CVE-2026-39897` · CVE record: Cacti cacti · CVSS 5.3 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Cross-site scripting (XSS) - [Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting](https://agentprime.io/advisories/CVE-2026-39894.md) `CVE-2026-39894` · CVE record: Cacti cacti · CVSS 2.9 Low · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-474 - [Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php](https://agentprime.io/advisories/CVE-2026-39893.md) `CVE-2026-39893` · CVE record: Cacti cacti · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: SQL injection - [SNMP Command Injection leads to RCE in Cacti](https://agentprime.io/advisories/CVE-2025-66399.md) `CVE-2025-66399` · CVE record: Cacti cacti · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 2 Dec 2025 · Tags: Command injection - [SQL injection in Cacti](https://agentprime.io/advisories/CVE-2025-26520.md) `CVE-2025-26520` · CVE record: Cacti Cacti · CVSS 7.6 High · Not analysed yet · Published 12 Feb 2025 · Tags: SQL injection - [Cacti has a SQL Injection vulnerability when using tree rules through Automation API](https://agentprime.io/advisories/CVE-2025-24368.md) `CVE-2025-24368` · CVE record: Cacti cacti · CVSS 6.9 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: SQL injection - [Cacti allows Arbitrary File Creation leading to RCE](https://agentprime.io/advisories/CVE-2025-24367.md) `CVE-2025-24367` · CVE record: Cacti cacti · CVSS 8.7 High · Critical (CVSS 7+ and EPSS) · EPSS 0.59 · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-144 - [Cacti has Authenticated RCE via multi-line SNMP responses](https://agentprime.io/advisories/CVE-2025-22604.md) `CVE-2025-22604` · CVE record: Cacti cacti · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jan 2025 · Tags: Command injection - [Cacti has a SQL Injection vulnerability when request automation devices](https://agentprime.io/advisories/CVE-2024-54145.md) `CVE-2024-54145` · CVE record: Cacti cacti · CVSS 6.3 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: SQL injection - [Cacti has a SQL Injection vulnerability when view host template](https://agentprime.io/advisories/CVE-2024-54146.md) `CVE-2024-54146` · CVE record: Cacti cacti · CVSS 7.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.46 · Not analysed yet · Published 27 Jan 2025 · Tags: SQL injection - [Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path](https://agentprime.io/advisories/CVE-2024-45598.md) `CVE-2024-45598` · CVE record: Cacti cacti · CVSS 6.0 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: Path traversal - [Remote code execution via Log Poisoning in Cacti](https://agentprime.io/advisories/CVE-2024-43363.md) `CVE-2024-43363` · CVE record: Cacti cacti · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.36 · Not analysed yet · Published 7 Oct 2024 · Tags: Code injection - [Stored Cross-site Scripting (XSS) when creating external links in Cacti](https://agentprime.io/advisories/CVE-2024-43365.md) `CVE-2024-43365` · CVE record: Cacti cacti · CVSS 5.7 Medium · EPSS 0.25 · Not analysed yet · Published 7 Oct 2024 · Tags: Cross-site scripting (XSS) - [Stored Cross-site Scripting (XSS) when creating external links in Cacti](https://agentprime.io/advisories/CVE-2024-43364.md) `CVE-2024-43364` · CVE record: Cacti cacti · CVSS 5.7 Medium · EPSS 0.38 · Not analysed yet · Published 7 Oct 2024 · Tags: Cross-site scripting (XSS) - [Stored Cross-site Scripting (XSS) when creating external links in Cacti](https://agentprime.io/advisories/CVE-2024-43362.md) `CVE-2024-43362` · CVE record: Cacti cacti · CVSS 7.3 High · Critical (CVSS 7+ and EPSS) · EPSS 0.39 · Not analysed yet · Published 7 Oct 2024 · Tags: Cross-site scripting (XSS) - [Authentication Bypass when using using older password hashes](https://agentprime.io/advisories/CVE-2024-34340.md) `CVE-2024-34340` · CVE record: Cacti cacti · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2024 · Tags: Authentication bypass, CWE-697 - [Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database](https://agentprime.io/advisories/CVE-2024-31460.md) `CVE-2024-31460` · CVE record: Cacti cacti · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2024 · Tags: SQL injection - [Cacti RCE vulnerability by file include in lib/plugin.php](https://agentprime.io/advisories/CVE-2024-31459.md) `CVE-2024-31459` · CVE record: Cacti cacti · CVSS 8.1 High · Not analysed yet · Published 13 May 2024 · Tags: File inclusion - [Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database](https://agentprime.io/advisories/CVE-2024-31458.md) `CVE-2024-31458` · CVE record: Cacti cacti · CVSS 4.6 Medium · EPSS 0.13 · Not analysed yet · Published 13 May 2024 · Tags: SQL injection - [SQL Injection vulnerability in automation_get_new_graphs_sql](https://agentprime.io/advisories/CVE-2024-31445.md) `CVE-2024-31445` · CVE record: Cacti cacti · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.26 · Not analysed yet · Published 13 May 2024 · Tags: SQL injection - [Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database](https://agentprime.io/advisories/CVE-2024-31444.md) `CVE-2024-31444` · CVE record: Cacti cacti · CVSS 4.6 Medium · EPSS 0.15 · Not analysed yet · Published 13 May 2024 · Tags: Cross-site scripting (XSS) - [Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database](https://agentprime.io/advisories/CVE-2024-31443.md) `CVE-2024-31443` · CVE record: Cacti cacti · CVSS 5.7 Medium · Not analysed yet · Published 13 May 2024 · Tags: Cross-site scripting (XSS) - [Cacti XSS vulnerability in display_settings](https://agentprime.io/advisories/CVE-2024-30268.md) `CVE-2024-30268` · CVE record: Cacti cacti · CVSS 6.1 Medium · Not analysed yet · Published 13 May 2024 · Tags: Cross-site scripting (XSS) - [Cacti command injection in cmd_realtime.php](https://agentprime.io/advisories/CVE-2024-29895.md) `CVE-2024-29895` · CVE record: Cacti cacti · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.99 · Not analysed yet · Published 13 May 2024 · Tags: Command injection - [Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API](https://agentprime.io/advisories/CVE-2024-29894.md) `CVE-2024-29894` · CVE record: Cacti cacti · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2024 · Tags: Cross-site scripting (XSS), CWE-116 - [Cacti Cross-site Scripting vulnerability when managing trees](https://agentprime.io/advisories/CVE-2024-27082.md) `CVE-2024-27082` · CVE record: Cacti cacti · CVSS 7.6 High · Not analysed yet · Published 13 May 2024 · Tags: Cross-site scripting (XSS) - [Cacti RCE vulnerability when importing packages](https://agentprime.io/advisories/CVE-2024-25641.md) `CVE-2024-25641` · CVE record: Cacti cacti · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.86 · Not analysed yet · Published 13 May 2024 · Tags: CWE-20 - [SQL Injection vulnerability when managing SNMP Notification Receivers](https://agentprime.io/advisories/CVE-2023-51448.md) `CVE-2023-51448` · CVE record: Cacti cacti · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.67 · Not analysed yet · Published 22 Dec 2023 · Tags: SQL injection - [Cross-Site Scripting vulnerability when Import xml template file](https://agentprime.io/advisories/CVE-2023-50250.md) `CVE-2023-50250` · CVE record: Cacti cacti · CVSS 5.4 Medium · Not analysed yet · Published 22 Dec 2023 · Tags: Cross-site scripting (XSS) - [Cacti has incomplete fix for CVE-2023-39515](https://agentprime.io/advisories/CVE-2023-49088.md) `CVE-2023-49088` · CVE record: Cacti cacti · CVSS 6.1 Medium · Not analysed yet · Published 22 Dec 2023 · Tags: Cross-site scripting (XSS) - [Cacti SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2023-49085.md) `CVE-2023-49085` · CVE record: Cacti cacti · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.74 · Not analysed yet · Published 22 Dec 2023 · Tags: SQL injection - [Cacti is vulnerable to cross-Site scripting (XSS) DOM](https://agentprime.io/advisories/CVE-2023-49086.md) `CVE-2023-49086` · CVE record: Cacti cacti · CVSS 5.4 Medium · Not analysed yet · Published 21 Dec 2023 · Tags: Cross-site scripting (XSS) - [Local File Inclusion (RCE) in Cacti](https://agentprime.io/advisories/CVE-2023-49084.md) `CVE-2023-49084` · CVE record: Cacti cacti · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.64 · Not analysed yet · Published 21 Dec 2023 · Tags: File inclusion - [Stored Cross-Site-Scripting on reports_admin.php device name in Cacti](https://agentprime.io/advisories/CVE-2023-39511.md) `CVE-2023-39511` · CVE record: Cacti cacti · CVSS 6.1 Medium · Not analysed yet · Published 6 Sept 2023 · Tags: Cross-site scripting (XSS) - [Insecure Deserialization in Cacti](https://agentprime.io/advisories/CVE-2023-30534.md) `CVE-2023-30534` · CVE record: Cacti cacti · CVSS 4.3 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: Insecure deserialization - [Cacti Privilege Escalation](https://agentprime.io/advisories/CVE-2023-31132.md) `CVE-2023-31132` · CVE record: Cacti cacti · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: Authentication bypass - [Authenticated command injection in SNMP options of a Device](https://agentprime.io/advisories/CVE-2023-39362.md) `CVE-2023-39362` · CVE record: Cacti cacti · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.85 · Not analysed yet · Published 5 Sept 2023 · Tags: Command injection - [Open redirect in change password functionality in Cacti](https://agentprime.io/advisories/CVE-2023-39364.md) `CVE-2023-39364` · CVE record: Cacti cacti · CVSS 3.5 Low · Not analysed yet · Published 5 Sept 2023 · Tags: Open redirect - [Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti](https://agentprime.io/advisories/CVE-2023-39516.md) `CVE-2023-39516` · CVE record: Cacti cacti · CVSS 6.1 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: Cross-site scripting (XSS) - [Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti](https://agentprime.io/advisories/CVE-2023-39365.md) `CVE-2023-39365` · CVE record: Cacti cacti · CVSS 4.6 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: SQL injection - [A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti](https://agentprime.io/advisories/CVE-2023-39357.md) `CVE-2023-39357` · CVE record: Cacti cacti · CVSS 8.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: SQL injection, CWE-20 - [Authenticated SQL injection vulnerability in reports_user.php in Cacti](https://agentprime.io/advisories/CVE-2023-39358.md) `CVE-2023-39358` · CVE record: Cacti cacti · CVSS 8.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: SQL injection - [Authenticated SQL injection vulnerability in graphs.php in Cacti](https://agentprime.io/advisories/CVE-2023-39359.md) `CVE-2023-39359` · CVE record: Cacti cacti · CVSS 8.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: SQL injection - [Unauthenticated SQL Injection in graph_view.php in Cacti](https://agentprime.io/advisories/CVE-2023-39361.md) `CVE-2023-39361` · CVE record: Cacti cacti · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.89 · Not analysed yet · Published 5 Sept 2023 · Tags: SQL injection Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .