Products: 2
    Vulnerabilities: 160
    Known Exploited: 1
    12
    Critical Level Threats
    57
    High Level Threats
    82
    Medium Level Threats
    4
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-49442

    Cacti: User Enumeration via Error Messages

    Last Modified: Oct 30, 2026
    Published: Oct 23, 2026

    CVE-2026-39902

    Cacti: Authenticated RCE on Data Input

    Last Modified: Oct 29, 2026
    Published: Oct 23, 2026

    CVE-2026-46531

    Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)

    Last Modified: Oct 29, 2026
    Published: Oct 23, 2026

    CVE-2026-71287

    Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection

    Last Modified: Aug 10, 2026
    Published: Aug 05, 2026

    CVE-2026-40941

    Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages

    Last Modified: Jun 26, 2026
    Published: Jun 25, 2026
    Items Per Page
    Cacti Vulnerabilities & Security CVEs | CVE-DB