https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:43:53.349513+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267098 EUVD-2026-267098 2026-10-08T08:43:53.489552+00:00 EUVD-2026-267098 https://cve.radiocsirt.org/vuln/fkie_cve-2025-45160 fkie_cve-2025-45160 2026-10-08T08:43:53.489603+00:00

A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, the application reflects the submitted filename back into an error popup without proper sanitization. As a result, attackers can inject arbitrary HTML elements (e.g., <h1>, <b>, <svg>) into the rendered page. NOTE: Multiple third-parties including the maintainer have stated that they cannot reproduce this issue after 1.2.27.

 https://cve.radiocsirt.org/vuln/ghsa-fxgp-4f5f-c9fc GHSA-fxgp-4f5f-c9fc 2026-10-08T08:43:53.489645+00:00

A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, the application reflects the submitted filename back into an error popup without proper sanitization. As a result, attackers can inject arbitrary HTML elements (e.g., <h1>, <b>, <svg>) into the rendered page.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-45160 UBUNTU-CVE-2025-45160 2026-10-08T08:43:53.489664+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti, Ubuntu:25.10: cacti, Ubuntu:26.04:LTS: cacti

A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, the application reflects the submitted filename back into an error popup without proper sanitization. As a result, attackers can inject arbitrary HTML elements (e.g., <h1>, <b>, <svg>) into the rendered page. NOTE: Multiple third-parties including the maintainer have stated that they cannot reproduce this issue after 1.2.27.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0259 WID-SEC-W-2026-0259 — Cacti: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-08T08:43:53.489729+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cacti ausnutzen, um eine HTML-Injektion durchzuführen, wodurch er das DOM manipulieren, UI-Redressing durchführen oder Social-Engineering-Angriffe starten kann.