https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:56:30.202837+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06057 bdu:2023-06057 2026-10-06T19:56:30.313110+00:00 bdu:2023-06057 https://cve.radiocsirt.org/vuln/cleanstart-2024-yu21875 CLEANSTART-2024-YU21875 — Cacti is an open source operational monitoring and fault management framework 2026-10-06T19:56:30.313153+00:00

Affected: CleanStart: cacti

Security vulnerability affects the cacti package. Cacti is an open source operational monitoring and fault management framework.

 https://cve.radiocsirt.org/vuln/euvd-2026-216703 EUVD-2026-216703 2026-10-06T19:56:30.313187+00:00 EUVD-2026-216703 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39364 fkie_cve-2023-39364 2026-10-06T19:56:30.313201+00:00

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The `auth_changepassword.php` file accepts `ref` as a URL parameter and reflects it in the form used to perform the change password. It's value is used to perform a redirect via `header` PHP function. A user can be tricked in performing the change password operation, e.g., via a phishing message, and then interacting with the malicious website where the redirection has been performed, e.g., downloading malwares, providing credentials, etc. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-39364 gsd-2023-39364 2026-10-06T19:56:30.313229+00:00 gsd-2023-39364 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0275-1 openSUSE-SU-2023:0275-1 — Security update for cacti, cacti-spine 2026-10-06T19:56:30.313240+00:00

Security update for cacti, cacti-spine

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39364 UBUNTU-CVE-2023-39364 2026-10-06T19:56:30.313266+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The `auth_changepassword.php` file accepts `ref` as a URL parameter and reflects it in the form used to perform the change password. It's value is used to perform a redirect via `header` PHP function. A user can be tricked in performing the change password operation, e.g., via a phishing message, and then interacting with the malicious website where the redirection has been performed, e.g., downloading malwares, providing credentials, etc. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2275 WID-SEC-W-2023-2275 — Cacti: Mehrere Schwachstellen 2026-10-06T19:56:30.313297+00:00

Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.