https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:05:00.828314+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06054 bdu:2023-06054 2026-10-06T06:05:00.834994+00:00 bdu:2023-06054 https://cve.radiocsirt.org/vuln/cleanstart-2024-ik86546 CLEANSTART-2024-IK86546 — Cacti is an open source operational monitoring and fault management framework 2026-10-06T06:05:00.835029+00:00

Affected: CleanStart: cacti

Security vulnerability affects the cacti package. Cacti is an open source operational monitoring and fault management framework.

 https://cve.radiocsirt.org/vuln/euvd-2026-216698 EUVD-2026-216698 2026-10-06T06:05:00.835060+00:00 EUVD-2026-216698 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39357 fkie_cve-2023-39357 2026-10-06T06:05:00.835074+00:00

Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was discovered. When the column type is numeric, the sql_save function directly utilizes user input. Many files and functions calling the sql_save function do not perform prior validation of user input, leading to the existence of multiple SQL injection vulnerabilities in Cacti. This allows authenticated users to exploit these SQL injection vulnerabilities to perform privilege escalation and remote code execution. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-39357 gsd-2023-39357 2026-10-06T06:05:00.835098+00:00 gsd-2023-39357 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0275-1 openSUSE-SU-2023:0275-1 — Security update for cacti, cacti-spine 2026-10-06T06:05:00.835110+00:00

Security update for cacti, cacti-spine

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39357 UBUNTU-CVE-2023-39357 2026-10-06T06:05:00.835129+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti

Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was discovered. When the column type is numeric, the sql_save function directly utilizes user input. Many files and functions calling the sql_save function do not perform prior validation of user input, leading to the existence of multiple SQL injection vulnerabilities in Cacti. This allows authenticated users to exploit these SQL injection vulnerabilities to perform privilege escalation and remote code execution. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2275 WID-SEC-W-2023-2275 — Cacti: Mehrere Schwachstellen 2026-10-06T06:05:00.835157+00:00

Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.