Product by Cacti

    Cacti

    158 known vulnerabilities in Cacti (Cacti), 1 of them actively exploited (CISA KEV).

    Key figures

    158

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    14

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cacti (Cacti)
    CriticalCVE-2022-46169

    Unauthenticated Command Injection

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2024-29895

    Cacti command injection in cmd_realtime.php

    		10.0
    CriticalCVE-2023-39361

    Unauthenticated SQL Injection in graph_view.php in Cacti

    also in 2 other products

    		9.8
    CriticalCVE-2024-25641

    Cacti RCE vulnerability when importing packages

    also in 1 other product

    		9.1
    HighCVE-2025-24367

    Cacti allows Arbitrary File Creation leading to RCE

    also in 1 other product

    		8.8
    HighCVE-2025-66399

    SNMP Command Injection leads to RCE in Cacti

    		8.8
    HighCVE-2023-49085

    Cacti SQL Injection vulnerability

    also in 1 other product

    		8.8
    HighCVE-2023-51448

    SQL Injection vulnerability when managing SNMP Notification Receivers

    		8.8
    HighCVE-2024-31445

    SQL Injection vulnerability in automation_get_new_graphs_sql

    also in 1 other product

    		8.8
    HighCVE-2024-54146

    Cacti has a SQL Injection vulnerability when view host template

    		7.6
    HighCVE-2023-49084

    Local File Inclusion (RCE) in Cacti

    also in 1 other product

    		8.1
    HighCVE-2020-8813

    Cacti: security vulnerability

    also in 4 other products

    		8.8
    CriticalCVE-2025-22604

    Cacti has Authenticated RCE via multi-line SNMP responses

    also in 1 other product

    		9.1
    HighCVE-2020-7237

    Cacti: Remote Code Execution

    		8.8
    HighCVE-2024-43362

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    also in 1 other product

    		7.3
    HighCVE-2024-43363

    Remote code execution via Log Poisoning in Cacti

    also in 1 other product

    		7.2
    HighCVE-2023-39362

    Authenticated command injection in SNMP options of a Device

    also in 2 other products

    		7.2
    CriticalCVE-2026-40079

    Cacti: Command Injection via escape_command() no-op in RRDtool execution

    also in 1 other product

    		9.8
    HighCVE-2020-14295

    Cacti: SQL Injection

    also in 1 other product

    		7.2
    HighCVE-2005-10004

    Cacti graph_view.php RCE via graph_start Parameter Injection

    		8.8
    CriticalCVE-2022-0730

    Cati: Improper Authentication

    also in 3 other products

    		9.8
    HighCVE-2024-43364

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    also in 1 other product

    		5.7
    HighCVE-2024-43365

    Stored Cross-site Scripting (XSS) when creating external links in Cacti

    also in 1 other product

    		5.7
    HighCVE-2020-35701

    Cacti: SQL Injection

    also in 1 other product

    		8.8
    MediumCVE-2019-17357

    Cacti: SQL Injection

    		6.5

    All vulnerabilities in search

    All products by Cacti