ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

15 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: cacti ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2026-39951
+6 in the same advisory: …40079 …40083 …40941 …40084 …40080 …40082
Cacti is an open source performance and fault management framework.

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph_name_regexp in the Reports feature. This issue has been fixed in version 1.2.31.

NVD description · AI analysis pending		8.8
group max
<1%
  • cacti cacti
—
CVE-2026-39938
+7 in the same advisory: …39893 …39955 …39948 …39899 …39900 …39897 +1
Cacti is an open source performance and fault management framework.

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool IPC serialization hardening. This issue has been resolved in version 1.2.31.

NVD description · AI analysis pending		9.8
group max
<1%
  • cacti cacti
—