https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T13:12:24.581142+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-03396 cnvd-2015-03396 2026-10-16T13:12:24.584678+00:00 cnvd-2015-03396 https://cve.radiocsirt.org/vuln/euvd-2026-89832 EUVD-2026-89832 2026-10-16T13:12:24.584709+00:00 EUVD-2026-89832 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0916 fkie_cve-2015-0916 2026-10-16T13:12:24.584723+00:00

SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the local_graph_id parameter, a different vulnerability than CVE-2007-6035.

 https://cve.radiocsirt.org/vuln/ghsa-xqwx-r7c6-p379 GHSA-xqwx-r7c6-p379 2026-10-16T13:12:24.584750+00:00

SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the local_graph_id parameter, a different vulnerability than CVE-2007-6035.

 https://cve.radiocsirt.org/vuln/gsd-2015-0916 gsd-2015-0916 2026-10-16T13:12:24.584765+00:00 gsd-2015-0916 https://cve.radiocsirt.org/vuln/jvndb-2015-000064 jvndb-2015-000064 2026-10-16T13:12:24.584776+00:00

Cacti is a web application that graphs stored data collected from network devices. Cacti contains a SQL injection vulnerability due to a flaw in processing user input values for 'local_graph_id' in graph.php. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.