📦

cacti

Vendor: cacti

Login to add this product to WatchStack
Actively Exploited 1 CISA KEV List
PoC / Exploits 20 Code Available
Total RCEs 31 Remote Access
Total CVEs 988 Total Indexed
Avg. EPSS 8.78% Exploit Prob.
Latest CVE CVE-2026-40941 Jun 25

Security Vulnerability Index

Page 16 / 99
4.3 CVSS
CVE-2008-0783
Exploit Found

Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the view_type parameter to graph.php; (2) the filter parameter to graph_view.php; (3) the action parameter to the draw_navigation_text function in lib/functions.php, reachable through index.php (aka the login page) or data_input.php; or (4) the login_username parameter to index.php.

EPSS: 5.25%
7.5 CVSS
CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

EPSS: 1.80%