agentprime: cacti

agentprime: cactiEvery new CVE for cacti.https://agentprime.io/CVE-2026-49442: Cacti: User Enumeration via Error Messageshttps://agentprime.io/advisories/CVE-2026-49442/https://agentprime.io/advisories/CVE-2026-49442/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 14:45:13 GMTCVECVE-2026-39902: Cacti: Authenticated RCE on Data Inputhttps://agentprime.io/advisories/CVE-2026-39902/https://agentprime.io/advisories/CVE-2026-39902/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 14:42:45 GMTCVECVE-2026-46531: Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)https://agentprime.io/advisories/CVE-2026-46531/https://agentprime.io/advisories/CVE-2026-46531/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 14:42:27 GMTCVECVE-2026-71287: Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injectionhttps://agentprime.io/advisories/CVE-2026-71287/https://agentprime.io/advisories/CVE-2026-71287/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 12:26:33 GMTCVECVE-2026-40941: Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packageshttps://agentprime.io/advisories/CVE-2026-40941/https://agentprime.io/advisories/CVE-2026-40941/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 23:01:30 GMTCVECVE-2026-40084: Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameterhttps://agentprime.io/advisories/CVE-2026-40084/https://agentprime.io/advisories/CVE-2026-40084/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 22:43:47 GMTCVECVE-2026-40083: Cacti: SQL Injection in managers.phphttps://agentprime.io/advisories/CVE-2026-40083/https://agentprime.io/advisories/CVE-2026-40083/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 22:39:17 GMTCVECVE-2026-40082: Cacti: Session Fixation via missing session_regenerate_id() after loginhttps://agentprime.io/advisories/CVE-2026-40082/https://agentprime.io/advisories/CVE-2026-40082/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 22:33:45 GMTCVECVE-2026-40080: Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirecthttps://agentprime.io/advisories/CVE-2026-40080/https://agentprime.io/advisories/CVE-2026-40080/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 22:29:51 GMTCVECVE-2026-40079: Cacti: Command Injection via escape_command() no-op in RRDtool executionhttps://agentprime.io/advisories/CVE-2026-40079/https://agentprime.io/advisories/CVE-2026-40079/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 23:26:40 GMTCVECVE-2026-39951: Cacti: Stored SQL Injection via graph_name_regexp in Reports featurehttps://agentprime.io/advisories/CVE-2026-39951/https://agentprime.io/advisories/CVE-2026-39951/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 23:14:39 GMTCVECVE-2026-39948: Cacti has SQL Injection via rfilter parameter in RLIKE clauseshttps://agentprime.io/advisories/CVE-2026-39948/https://agentprime.io/advisories/CVE-2026-39948/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 23:06:39 GMTCVEcriticalCVE-2026-39955: Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.phphttps://agentprime.io/advisories/CVE-2026-39955/https://agentprime.io/advisories/CVE-2026-39955/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 22:49:13 GMTCVEcriticalCVE-2026-39938: Cacti: Unauthenticated RCE on Graph Imagehttps://agentprime.io/advisories/CVE-2026-39938/https://agentprime.io/advisories/CVE-2026-39938/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 22:41:04 GMTCVEcriticalCVE-2026-39900: Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript contexthttps://agentprime.io/advisories/CVE-2026-39900/https://agentprime.io/advisories/CVE-2026-39900/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 22:37:17 GMTCVECVE-2026-39899: Cacti: Path Traversal via filename parameter in package_import.phphttps://agentprime.io/advisories/CVE-2026-39899/https://agentprime.io/advisories/CVE-2026-39899/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 22:33:14 GMTCVECVE-2026-39897: Cacti has a Reflected XSS Vulnerability via html_auth_footerhttps://agentprime.io/advisories/CVE-2026-39897/https://agentprime.io/advisories/CVE-2026-39897/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 22:00:56 GMTCVECVE-2026-39894: Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formattinghttps://agentprime.io/advisories/CVE-2026-39894/https://agentprime.io/advisories/CVE-2026-39894/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 21:55:49 GMTCVECVE-2026-39893: Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.phphttps://agentprime.io/advisories/CVE-2026-39893/https://agentprime.io/advisories/CVE-2026-39893/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 21:45:34 GMTCVEcriticalCVE-2025-66399: SNMP Command Injection leads to RCE in Cactihttps://agentprime.io/advisories/CVE-2025-66399/https://agentprime.io/advisories/CVE-2025-66399/CVSS 7.4 (High). Critical: CVSS score 7.4 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Dec 2025 17:57:11 GMTCVEcriticalCVE-2025-26520: SQL injection in Cactihttps://agentprime.io/advisories/CVE-2025-26520/https://agentprime.io/advisories/CVE-2025-26520/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Feb 2025 00:00:00 GMTCVECVE-2025-24368: Cacti has a SQL Injection vulnerability when using tree rules through Automation APIhttps://agentprime.io/advisories/CVE-2025-24368/https://agentprime.io/advisories/CVE-2025-24368/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 17:16:17 GMTCVECVE-2025-24367: Cacti allows Arbitrary File Creation leading to RCEhttps://agentprime.io/advisories/CVE-2025-24367/https://agentprime.io/advisories/CVE-2025-24367/CVSS 8.7 (High). Critical: CVSS score 8.7 (7.0 or more) and EPSS 0.59 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 17:12:40 GMTCVEcriticalCVE-2025-22604: Cacti has Authenticated RCE via multi-line SNMP responseshttps://agentprime.io/advisories/CVE-2025-22604/https://agentprime.io/advisories/CVE-2025-22604/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 17:06:58 GMTCVEcriticalCVE-2024-54145: Cacti has a SQL Injection vulnerability when request automation deviceshttps://agentprime.io/advisories/CVE-2024-54145/https://agentprime.io/advisories/CVE-2024-54145/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 17:04:31 GMTCVECVE-2024-54146: Cacti has a SQL Injection vulnerability when view host templatehttps://agentprime.io/advisories/CVE-2024-54146/https://agentprime.io/advisories/CVE-2024-54146/CVSS 7.6 (High). Critical: CVSS score 7.6 (7.0 or more) and EPSS 0.46 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 17:04:16 GMTCVEcriticalCVE-2024-45598: Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Pathhttps://agentprime.io/advisories/CVE-2024-45598/https://agentprime.io/advisories/CVE-2024-45598/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 15:46:02 GMTCVECVE-2024-43363: Remote code execution via Log Poisoning in Cactihttps://agentprime.io/advisories/CVE-2024-43363/https://agentprime.io/advisories/CVE-2024-43363/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.36 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Oct 2024 20:40:39 GMTCVEcriticalCVE-2024-43365: Stored Cross-site Scripting (XSS) when creating external links in Cactihttps://agentprime.io/advisories/CVE-2024-43365/https://agentprime.io/advisories/CVE-2024-43365/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Oct 2024 20:38:26 GMTCVECVE-2024-43364: Stored Cross-site Scripting (XSS) when creating external links in Cactihttps://agentprime.io/advisories/CVE-2024-43364/https://agentprime.io/advisories/CVE-2024-43364/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Oct 2024 20:38:24 GMTCVECVE-2024-43362: Stored Cross-site Scripting (XSS) when creating external links in Cactihttps://agentprime.io/advisories/CVE-2024-43362/https://agentprime.io/advisories/CVE-2024-43362/CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.39 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Oct 2024 20:34:58 GMTCVEcriticalCVE-2024-34340: Authentication Bypass when using using older password hasheshttps://agentprime.io/advisories/CVE-2024-34340/https://agentprime.io/advisories/CVE-2024-34340/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 15:26:32 GMTCVEcriticalCVE-2024-31460: Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in databasehttps://agentprime.io/advisories/CVE-2024-31460/https://agentprime.io/advisories/CVE-2024-31460/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 15:14:38 GMTCVECVE-2024-31459: Cacti RCE vulnerability by file include in lib/plugin.phphttps://agentprime.io/advisories/CVE-2024-31459/https://agentprime.io/advisories/CVE-2024-31459/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 15:11:37 GMTCVECVE-2024-31458: Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in databasehttps://agentprime.io/advisories/CVE-2024-31458/https://agentprime.io/advisories/CVE-2024-31458/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 15:07:08 GMTCVECVE-2024-31445: SQL Injection vulnerability in automation_get_new_graphs_sqlhttps://agentprime.io/advisories/CVE-2024-31445/https://agentprime.io/advisories/CVE-2024-31445/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.26 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 15:05:56 GMTCVEcriticalCVE-2024-31444: Cacti XSS vulnerability in lib/html.php by reading dirty data stored in databasehttps://agentprime.io/advisories/CVE-2024-31444/https://agentprime.io/advisories/CVE-2024-31444/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 15:03:58 GMTCVECVE-2024-31443: Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in databasehttps://agentprime.io/advisories/CVE-2024-31443/https://agentprime.io/advisories/CVE-2024-31443/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 15:01:44 GMTCVECVE-2024-30268: Cacti XSS vulnerability in display_settingshttps://agentprime.io/advisories/CVE-2024-30268/https://agentprime.io/advisories/CVE-2024-30268/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 14:56:18 GMTCVECVE-2024-29895: Cacti command injection in cmd_realtime.phphttps://agentprime.io/advisories/CVE-2024-29895/https://agentprime.io/advisories/CVE-2024-29895/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.99 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 14:33:27 GMTCVEcriticalCVE-2024-29894: Cacti Cross-site Scripting vulnerability when using JavaScript based messaging APIhttps://agentprime.io/advisories/CVE-2024-29894/https://agentprime.io/advisories/CVE-2024-29894/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 14:24:32 GMTCVECVE-2024-27082: Cacti Cross-site Scripting vulnerability when managing treeshttps://agentprime.io/advisories/CVE-2024-27082/https://agentprime.io/advisories/CVE-2024-27082/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 13:49:10 GMTCVECVE-2024-25641: Cacti RCE vulnerability when importing packageshttps://agentprime.io/advisories/CVE-2024-25641/https://agentprime.io/advisories/CVE-2024-25641/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.86 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 13:28:58 GMTCVEcriticalCVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivershttps://agentprime.io/advisories/CVE-2023-51448/https://agentprime.io/advisories/CVE-2023-51448/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.67 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Dec 2023 16:44:57 GMTCVEcriticalCVE-2023-50250: Cross-Site Scripting vulnerability when Import xml template filehttps://agentprime.io/advisories/CVE-2023-50250/https://agentprime.io/advisories/CVE-2023-50250/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Dec 2023 16:39:47 GMTCVECVE-2023-49088: Cacti has incomplete fix for CVE-2023-39515https://agentprime.io/advisories/CVE-2023-49088/https://agentprime.io/advisories/CVE-2023-49088/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Dec 2023 16:16:53 GMTCVECVE-2023-49085: Cacti SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2023-49085/https://agentprime.io/advisories/CVE-2023-49085/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.74 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Dec 2023 16:13:13 GMTCVEcriticalCVE-2023-49086: Cacti is vulnerable to cross-Site scripting (XSS) DOMhttps://agentprime.io/advisories/CVE-2023-49086/https://agentprime.io/advisories/CVE-2023-49086/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Dec 2023 23:29:45 GMTCVECVE-2023-49084: Local File Inclusion (RCE) in Cactihttps://agentprime.io/advisories/CVE-2023-49084/https://agentprime.io/advisories/CVE-2023-49084/CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 0.64 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Dec 2023 23:04:44 GMTCVEcriticalCVE-2023-39511: Stored Cross-Site-Scripting on reports_admin.php device name in Cactihttps://agentprime.io/advisories/CVE-2023-39511/https://agentprime.io/advisories/CVE-2023-39511/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Sep 2023 17:40:13 GMTCVE