https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T22:37:03.169191+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-39361 CVE-2023-39361 — Unauthenticated SQL Injection in graph_view.php in Cacti 2026-09-30T22:37:03.200747+00:00

Affected: cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are being utilized in an enabled state, there could be the potential for significant damage. Attackers may exploit this vulnerability, and there may be possibilities for actions such as the usurpation of administrative privileges or remote code execution. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://vulnerability.circl.lu/vuln/usn-6720-1 USN-6720-1 — cacti vulnerability 2026-09-30T22:37:03.200867+00:00

Affected: Ubuntu:Pro:22.04:LTS: cacti

Kentaro Kawane discovered that Cacti incorrectly handled user provided input sent through request parameters to the graph_view.php script. A remote authenticated attacker could use this issue to perform SQL injection attacks.