https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:46:28.720220+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05530 bdu:2023-05530 2026-10-06T04:46:28.835947+00:00 bdu:2023-05530 https://cve.radiocsirt.org/vuln/cleanstart-2024-dy69815 CLEANSTART-2024-DY69815 — Cacti is an open source operational monitoring and fault management framework 2026-10-06T04:46:28.835983+00:00

Affected: CleanStart: cacti

Security vulnerability affects the cacti package. Cacti is an open source operational monitoring and fault management framework.

 https://cve.radiocsirt.org/vuln/euvd-2026-216700 EUVD-2026-216700 2026-10-06T04:46:28.836015+00:00 EUVD-2026-216700 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39359 fkie_cve-2023-39359 2026-10-06T04:46:28.836028+00:00

Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `graphs.php` file. When dealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL statement. This creates an SQL injection vulnerability. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-39359 gsd-2023-39359 2026-10-06T04:46:28.836052+00:00 gsd-2023-39359 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0275-1 openSUSE-SU-2023:0275-1 — Security update for cacti, cacti-spine 2026-10-06T04:46:28.836070+00:00

Security update for cacti, cacti-spine

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39359 UBUNTU-CVE-2023-39359 2026-10-06T04:46:28.836099+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti

Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `graphs.php` file. When dealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL statement. This creates an SQL injection vulnerability. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2275 WID-SEC-W-2023-2275 — Cacti: Mehrere Schwachstellen 2026-10-06T04:46:28.836127+00:00

Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.