Vulnerabilitycritical
Critical remote code execution bug found in Cacti framework
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-24367+1 related CVE | Authenticated Remote Code Execution in Cacti via Arbitrary PHP File Creation in Web Root | 8.7 group max | 54% | PoC |
From the original article
1 min read at securityaffairs.com
A critical flaw in Cacti open-source network monitoring and fault management framework that could allow remote code execution. Cacti is an open-source platform that provides a robust and extensible operational monitoring and fault management framework for users. A critical vulnerability, tracked as CVE-2025-22604 (CVSS score of 9.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.