https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:52:55.124427+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04179 bdu:2024-04179 2026-10-05T10:52:55.131024+00:00 bdu:2024-04179 https://cve.radiocsirt.org/vuln/cleanstart-2024-nw20033 CLEANSTART-2024-NW20033 — Cacti provides an operational monitoring and fault management framework 2026-10-05T10:52:55.131056+00:00

Affected: CleanStart: cacti

Security vulnerability affects the cacti package. Cacti provides an operational monitoring and fault management framework.

 https://cve.radiocsirt.org/vuln/euvd-2026-258889 EUVD-2026-258889 2026-10-05T10:52:55.131088+00:00 EUVD-2026-258889 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31458 fkie_cve-2024-31458 2026-10-05T10:52:55.131101+00:00

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `form_save()` function in `graph_template_inputs.php` is not thoroughly checked and is used to concatenate the SQL statement in `draw_nontemplated_fields_graph_item()` function from `lib/html_form_templates.php` , finally resulting in SQL injection. Version 1.2.27 contains a patch for the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-31458 gsd-2024-31458 2026-10-05T10:52:55.131123+00:00 gsd-2024-31458 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0274-1 openSUSE-SU-2024:0274-1 — Security update for cacti, cacti-spine 2026-10-05T10:52:55.131134+00:00

Security update for cacti, cacti-spine

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-31458 UBUNTU-CVE-2024-31458 2026-10-05T10:52:55.131152+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:20.04:LTS: cacti, Ubuntu:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in `form_save()` function in `graph_template_inputs.php` is not thoroughly checked and is used to concatenate the SQL statement in `draw_nontemplated_fields_graph_item()` function from `lib/html_form_templates.php` , finally resulting in SQL injection. Version 1.2.27 contains a patch for the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1095 WID-SEC-W-2024-1095 — Cacti: Mehrere Schwachstellen 2026-10-05T10:52:55.131178+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Code auszuführen oder und SQL-Injection oder Cross-Site-Scripting Angriffe durchzuführen.