https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T19:45:27.202188+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-04005 cnvd-2020-04005 2026-10-05T19:45:27.334676+00:00 cnvd-2020-04005 https://cve.radiocsirt.org/vuln/euvd-2026-37760 EUVD-2026-37760 2026-10-05T19:45:27.334724+00:00 EUVD-2026-37760 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7106 fkie_cve-2020-7106 2026-10-05T19:45:27.334738+00:00

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).

 https://cve.radiocsirt.org/vuln/ghsa-4x8f-h58h-jh6h GHSA-4x8f-h58h-jh6h 2026-10-05T19:45:27.334769+00:00

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).

 https://cve.radiocsirt.org/vuln/gsd-2020-7106 gsd-2020-7106 2026-10-05T19:45:27.334784+00:00 gsd-2020-7106 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0272-1 openSUSE-SU-2020:0272-1 — Security update for cacti, cacti-spine 2026-10-05T19:45:27.334795+00:00

Security update for cacti, cacti-spine

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7106 UBUNTU-CVE-2020-7106 2026-10-05T19:45:27.334817+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).