https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:18:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00974 bdu:2025-00974 https://cve.radiocsirt.org/vuln/bdu:2025-00974 https://cve.radiocsirt.org/vuln/euvd-2026-258255 EUVD-2026-258255 https://cve.radiocsirt.org/vuln/euvd-2026-258255 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24367 <p>Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.</p> <p>Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24367 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24367 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti, Ubuntu:25.10: cacti</p> <p>Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti, Ubuntu:25.10: cacti</p> <p>Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24367 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0190 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuführen und SQL-Abfragen zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuführen und SQL-Abfragen zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0190