{"vulnerability": "cve-2026-39938", "sightings": [{"uuid": "d88b7e11-47e7-43ed-8bd8-60ecba3d982a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39938", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-cacti-1", "content": "", "creation_timestamp": "2026-06-25T13:45:18.181210Z"}, {"uuid": "36a24bdd-8adc-4fad-a40f-fd37e800a4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39938", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mp5vy2ghdl2n", "content": "\ud83d\udccc CVE-2026-39938 - Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool... https://www.cyberhub.blog/cves/CVE-2026-39938", "creation_timestamp": "2026-06-26T02:37:07.159330Z"}, {"uuid": "e7a97532-1b93-458f-a6df-e8a19123372d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39938", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mphqi5xlua2o", "content": "Cacti vulnerabilities in 1.2.30 include pre-auth SQL injection and LFI, both CVSS 9.8 (CVE-2026-39955, CVE-2026-39938). Update to 1.2.31 now.\n\n#Cacti #SQLInjection #LFI #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-06-30T00:25:22.721908Z"}, {"uuid": "15942129-9136-4d2a-b5ee-18b8ba47dca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39938", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mpmq232z322b", "content": "\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u76e3\u8996\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af Cacti\u306b4\u4ef6\u306e\u8106\u5f31\u6027(CVE-2026-39893\u30fbCVE-2026-39955\u30fbCVE-2026-39938\u30fbCVE-2026-39951)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-02T00:00:51.039688Z"}]}