[CVE-2026-39955] Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have p…

Descripción técnica

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have pre-authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php. This issue has been fixed in version 1.2.31.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Cacti — Cacti

Debilidades (CWE)

CWE-89

Fuente oficial

Publicado en NIST NVD.