Cacti kayıtları
cacti üreticisine ait 155 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %0,6
- Silahlaştırılmış
- 7 · %4,5
- Pre-auth RCE
- 23
- Düzeltme kaydı olan
- %97,4
- Yayından KEV’e ortanca
- 73 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')62
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')42
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7
- CWE-94 Improper Control of Generation of Code ('Code Injection')5
- CWE-20 Improper Input Validation4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
155 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
99Hemen | CVE-2022-46169Silahlaştırılmış | Unauthenticated Command Injectioncacti · cacti · CWE-74 | Kritik9,8 | KEV | %99,8 | 5 Ara 2022 |
70Bu hafta | CVE-2024-29895Kavram kanıtı | Cacti command injection in cmd_realtime.phpcacti · cacti · CWE-77 | Kritik10,0 | — | %98,5 | 14 May 2024 |
66Bu hafta | CVE-2023-39361Kavram kanıtı | Unauthenticated SQL Injection in graph_view.php in Cacticacti · cacti · CWE-89 | Kritik9,8 | — | %88,8 | 5 Eyl 2023 |
57Planlayın | CVE-2023-49085Silahlaştırılmış | Cacti SQL Injection vulnerabilitycacti · cacti · CWE-89 | Yüksek8,8 | — | %74,5 | 22 Ara 2023 |
57Planlayın | CVE-2020-8813Kavram kanıtı | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest cacti · cacti · CWE-78 | Yüksek8,8 | — | %74,0 | 21 Şub 2020 |
55Planlayın | CVE-2023-51448İstismar yok | SQL Injection vulnerability when managing SNMP Notification Receiverscacti · cacti · CWE-89 | Yüksek8,8 | — | %67,3 | 22 Ara 2023 |
54Planlayın | CVE-2020-14295Silahlaştırılmış | A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter.cacti · cacti · CWE-89 | Yüksek7,2 | — | %86,3 | 17 Haz 2020 |
54Planlayın | CVE-2024-25641Silahlaştırılmış | Cacti RCE vulnerability when importing packagescacti · cacti · CWE-20 | Yüksek7,2 | — | %86,3 | 14 May 2024 |
54Planlayın | CVE-2023-39362Kavram kanıtı | Authenticated command injection in SNMP options of a Devicecacti · cacti · CWE-78 | Yüksek7,2 | — | %85,4 | 5 Eyl 2023 |
54Planlayın | CVE-2023-49084Silahlaştırılmış | Local File Inclusion (RCE) in Cacticacti · cacti · CWE-98 | Yüksek8,8 | — | %64,4 | 21 Ara 2023 |
50Planlayın | CVE-2025-24367Silahlaştırılmış | Cacti allows Arbitrary File Creation leading to RCEcacti · cacti · CWE-144 | Yüksek8,7 | — | %54,0 | 27 Oca 2025 |
47Planlayın | CVE-2024-54146İstismar yok | Cacti has a SQL Injection vulnerability when view host templatecacti · cacti · CWE-89 | Yüksek8,8 | — | %41,0 | 27 Oca 2025 |
46Planlayın | CVE-2020-7237İstismar yok | Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_acacti · cacti · CWE-78 | Yüksek8,8 | — | %37,1 | 20 Oca 2020 |
43Planlayın | CVE-2024-43364İstismar yok | Stored Cross-site Scripting (XSS) when creating external links in Cacticacti · cacti · CWE-79 | Yüksek8,2 | — | %37,9 | 7 Eki 2024 |
43Planlayın | CVE-2024-31445İstismar yok | SQL Injection vulnerability in automation_get_new_graphs_sqlcacti · cacti · CWE-89 | Yüksek8,8 | — | %26,2 | 14 May 2024 |
40Planlayın | CVE-2024-43365İstismar yok | Stored Cross-site Scripting (XSS) when creating external links in Cacticacti · cacti · CWE-79 | Yüksek8,2 | — | %25,1 | 7 Eki 2024 |
40Planlayın | CVE-2022-0730İstismar yok | Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.cacti · cacti · CWE-287 | Kritik9,8 | — | %3,5 | 3 Mar 2022 |
40Planlayın | CVE-2017-12065İstismar yok | spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end pacacti · cacti | Kritik9,8 | — | %2,9 | 1 Ağu 2017 |
39İzleyin | CVE-2024-43363Kavram kanıtı | Remote code execution via Log Poisoning in Cacticacti · cacti · CWE-94 | Yüksek7,2 | — | %35,6 | 7 Eki 2024 |
39İzleyin | CVE-2009-4112Kavram kanıtı | Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux -cacti · cacti · CWE-264 | Kritik9,0 | — | %11,5 | 30 Kas 2009 |
39İzleyin | CVE-2026-39938Kavram kanıtı | Cacti: Unauthenticated RCE on Graph Imagecacti · cacti · CWE-22 | Kritik9,8 | — | %0,7 | 24 Haz 2026 |
39İzleyin | CVE-2026-39893İstismar yok | Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.phpcacti · cacti · CWE-89 | Kritik9,8 | — | %0,7 | 24 Haz 2026 |
39İzleyin | CVE-2026-39955İstismar yok | Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.phpcacti · cacti · CWE-89 | Kritik9,8 | — | %0,6 | 24 Haz 2026 |
39İzleyin | CVE-2025-26520İstismar yok | Cacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the graph_template parameter.cacti · cacti · CWE-89 | Kritik9,8 | — | %0,5 | 12 Şub 2025 |
37İzleyin | CVE-2026-39948İstismar yok | Cacti has SQL Injection via rfilter parameter in RLIKE clausescacti · cacti · CWE-89 | Kritik9,3 | — | %0,8 | 24 Haz 2026 |
- CVE-2022-4616999Hemen
Unauthenticated Command Injection
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100cacti · cacti5 Ara 2022
- CVE-2024-2989570Bu hafta
Cacti command injection in cmd_realtime.php
KritikCVSS 10,0Kavram kanıtıEPSS %98cacti · cacti14 May 2024
- CVE-2023-3936166Bu hafta
Unauthenticated SQL Injection in graph_view.php in Cacti
KritikCVSS 9,8Kavram kanıtıEPSS %89cacti · cacti5 Eyl 2023
- CVE-2023-4908557Planlayın
Cacti SQL Injection vulnerability
YüksekCVSS 8,8SilahlaştırılmışEPSS %74cacti · cacti22 Ara 2023
- CVE-2020-881357Planlayın
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest
YüksekCVSS 8,8Kavram kanıtıEPSS %74cacti · cacti21 Şub 2020
- CVE-2023-5144855Planlayın
SQL Injection vulnerability when managing SNMP Notification Receivers
YüksekCVSS 8,8İstismar yokEPSS %67cacti · cacti22 Ara 2023
- CVE-2020-1429554Planlayın
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter.
YüksekCVSS 7,2SilahlaştırılmışEPSS %86cacti · cacti17 Haz 2020
- CVE-2024-2564154Planlayın
Cacti RCE vulnerability when importing packages
YüksekCVSS 7,2SilahlaştırılmışEPSS %86cacti · cacti14 May 2024
- CVE-2023-3936254Planlayın
Authenticated command injection in SNMP options of a Device
YüksekCVSS 7,2Kavram kanıtıEPSS %85cacti · cacti5 Eyl 2023
- CVE-2023-4908454Planlayın
Local File Inclusion (RCE) in Cacti
YüksekCVSS 8,8SilahlaştırılmışEPSS %64cacti · cacti21 Ara 2023
- CVE-2025-2436750Planlayın
Cacti allows Arbitrary File Creation leading to RCE
YüksekCVSS 8,7SilahlaştırılmışEPSS %54cacti · cacti27 Oca 2025
- CVE-2024-5414647Planlayın
Cacti has a SQL Injection vulnerability when view host template
YüksekCVSS 8,8İstismar yokEPSS %41cacti · cacti27 Oca 2025
- CVE-2020-723746Planlayın
Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_a
YüksekCVSS 8,8İstismar yokEPSS %37cacti · cacti20 Oca 2020
- CVE-2024-4336443Planlayın
Stored Cross-site Scripting (XSS) when creating external links in Cacti
YüksekCVSS 8,2İstismar yokEPSS %38cacti · cacti7 Eki 2024
- CVE-2024-3144543Planlayın
SQL Injection vulnerability in automation_get_new_graphs_sql
YüksekCVSS 8,8İstismar yokEPSS %26cacti · cacti14 May 2024
- CVE-2024-4336540Planlayın
Stored Cross-site Scripting (XSS) when creating external links in Cacti
YüksekCVSS 8,2İstismar yokEPSS %25cacti · cacti7 Eki 2024
- CVE-2022-073040Planlayın
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
KritikCVSS 9,8İstismar yokEPSS %3cacti · cacti3 Mar 2022
- CVE-2017-1206540Planlayın
spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end pa
KritikCVSS 9,8İstismar yokEPSS %3cacti · cacti1 Ağu 2017
- CVE-2024-4336339İzleyin
Remote code execution via Log Poisoning in Cacti
YüksekCVSS 7,2Kavram kanıtıEPSS %36cacti · cacti7 Eki 2024
- CVE-2009-411239İzleyin
Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux -
KritikCVSS 9,0Kavram kanıtıEPSS %11cacti · cacti30 Kas 2009
- CVE-2026-3993839İzleyin
Cacti: Unauthenticated RCE on Graph Image
KritikCVSS 9,8Kavram kanıtıEPSS %1cacti · cacti24 Haz 2026
- CVE-2026-3989339İzleyin
Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php
KritikCVSS 9,8İstismar yokEPSS %1cacti · cacti24 Haz 2026
- CVE-2026-3995539İzleyin
Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php
KritikCVSS 9,8İstismar yokEPSS %1cacti · cacti24 Haz 2026
- CVE-2025-2652039İzleyin
Cacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the graph_template parameter.
KritikCVSS 9,8İstismar yokEPSS %0cacti · cacti12 Şub 2025
- CVE-2026-3994837İzleyin
Cacti has SQL Injection via rfilter parameter in RLIKE clauses
KritikCVSS 9,3İstismar yokEPSS %1cacti · cacti24 Haz 2026