[CVE-2026-39951] Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a…

Descripción técnica

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph_name_regexp in the Reports feature. This issue has been fixed in version 1.2.31.

Puntuación CVSS

Score: 7.6/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Productos afectados

Cacti — Cacti

Debilidades (CWE)

CWE-89

Fuente oficial

Publicado en NIST NVD.