https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T02:07:41.478558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00089 bdu:2024-00089 2026-10-18T02:07:41.498649+00:00 bdu:2024-00089 https://cve.radiocsirt.org/vuln/cleanstart-2024-qm09372 CLEANSTART-2024-QM09372 — Cacti is an open source operational monitoring and fault management framework 2026-10-18T02:07:41.498689+00:00

Affected: CleanStart: cacti

Security vulnerability affects the cacti package. Cacti is an open source operational monitoring and fault management framework.

 https://cve.radiocsirt.org/vuln/euvd-2026-216972 EUVD-2026-216972 2026-10-18T02:07:41.498722+00:00 EUVD-2026-216972 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50250 fkie_cve-2023-50250 2026-10-18T02:07:41.498734+00:00

Cacti is an open source operational monitoring and fault management framework. A reflection cross-site scripting vulnerability was discovered in version 1.2.25. Attackers can exploit this vulnerability to perform actions on behalf of other users. The vulnerability is found in `templates_import.php.` When uploading an xml template file, if the XML file does not pass the check, the server will give a JavaScript pop-up prompt, which contains unfiltered xml template file name, resulting in XSS. An attacker exploiting this vulnerability could execute actions on behalf of other users. This ability to impersonate users could lead to unauthorized changes to settings. As of time of publication, no patched versions are available.

 https://cve.radiocsirt.org/vuln/gsd-2023-50250 gsd-2023-50250 2026-10-18T02:07:41.498759+00:00 gsd-2023-50250 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0031-1 openSUSE-SU-2024:0031-1 — Security update for cacti, cacti-spine 2026-10-18T02:07:41.498769+00:00

Security update for cacti, cacti-spine

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-50250 UBUNTU-CVE-2023-50250 2026-10-18T02:07:41.498788+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti

Cacti is an open source operational monitoring and fault management framework. A reflection cross-site scripting vulnerability was discovered in version 1.2.25. Attackers can exploit this vulnerability to perform actions on behalf of other users. The vulnerability is found in `templates_import.php.` When uploading an xml template file, if the XML file does not pass the check, the server will give a JavaScript pop-up prompt, which contains unfiltered xml template file name, resulting in XSS. An attacker exploiting this vulnerability could execute actions on behalf of other users. This ability to impersonate users could lead to unauthorized changes to settings. As of time of publication, no patched versions are available.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3221 WID-SEC-W-2023-3221 — Cacti: Mehrere Schwachstellen 2026-10-18T02:07:41.498814+00:00

Ein entfernter, anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um vertrauliche Informationen offenzulegen, Dateien zu manipulieren und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder XSS-Angriffe durchzuführen.