Cacti Command Injection Vulnerability

Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.

Published 18 Sep 2026Updated 18 Sep 20264 sources
CVSS 9.8 ✓ VERIFIED REFERENCE△ CISA KEV

Source timeline

Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗