[CVE-2026-39938] Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have u…

Descripción técnica

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool IPC serialization hardening. This issue has been resolved in version 1.2.31.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Cacti — Cacti

Debilidades (CWE)

CWE-22, CWE-78

Fuente oficial

Publicado en NIST NVD.