Vendor

Cacti

1 of 9 Cacti CVEs in Patchfirst (11%) are in of vulnerabilities exploited in the wild.

CVEs: 9
In CISA KEV: 111%
Known ransomware use: 0
Median days to KEV: 73; from publication
Latest KEV listing: 16 Feb 2023

Watch Cacti Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Cacti In KEV: 1 CVEs: 1
cacti In KEV: 0 CVEs: 8

Top ATT&CK techniques

What attackers do with Cacti CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 1
T1059Command and Scripting Interpreter CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/cacti.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Cacti CVEs linked to the technique. Each link’s provenance is on the CVE page.

Cacti CVEs

9 CVEs, by priority

CVE-2023-39361Unauthenticated SQL Injection in graph_view.php in Cacti
Cacti · cactiPublic exploitCritical · 9.8
88.8%Top 0.22%
72.5priority
CVE-2022-46169Cacti Command Injection Vulnerability
Cacti · CactiKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
99.8%Top 0.04%
69.9priority
CVE-2024-29895Cacti command injection in cmd_realtime.php
Cacti · cactiPublic exploitCritical · 10.0
98.8%Top 0.07%
67.0priority
CVE-2024-25641Cacti RCE vulnerability when importing packages
Cacti · cactiPublic exploitCritical · 9.1
86.3%Top 0.27%
32.0priority
CVE-2023-49085Cacti SQL Injection vulnerability
Cacti · cactiPublic exploitHigh · 8.8
74.5%Top 0.51%
31.7priority
CVE-2023-49084Local File Inclusion (RCE) in Cacti
Cacti · cactiPublic exploitHigh · 8.1
64.4%Top 0.77%
31.2priority
CVE-2025-24367Cacti allows Arbitrary File Creation leading to RCE
Cacti · cactiPublic exploitHigh · 8.7
54.3%Top 0.99%
30.9priority
CVE-2023-39362Authenticated command injection in SNMP options of a Device
Cacti · cactiPublic exploitHigh · 7.2
85.4%Top 0.28%
30.0priority
CVE-2023-51448SQL Injection vulnerability when managing SNMP Notification Receivers
Cacti · cactiHigh · 8.8
67.3%Top 0.7%
26.0priority