Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner

Sources

Sort by

Order

Apply ordering (override relevance)

Related vulnerabilities

WID-SEC-W-2026-1931

Vulnerability from csaf_certbund - Published: 2026-06-15 22:00 - Updated: 2026-06-15 22:00

Summary

Cacti: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Cacti ist ein grafisches Frontend zur Visualisierung von statistischen Daten, erfasst durch die Round Robin Database rrdtool.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um Informationen offenzulegen.

Betroffene Betriebssysteme: - Linux - UNIX - Windows

CVE-2026-1513

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-22802

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-32935

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39893

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39894

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39895

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39896

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39897

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39898

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39899

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39900

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39902

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39938

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39939

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39947

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39948

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39949

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39950

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39951

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39952

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-39955

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40078

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40079

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40080

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40081

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40082

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40083

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40084

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40194

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-40941

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-41884

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-44481

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

CVE-2026-46531

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Cacti <1.2.31 Open Source / Cacti		<1.2.31

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.cacti.net/info/changelog	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Cacti ist ein grafisches Frontend zur Visualisierung von statistischen Daten, erfasst durch die Round Robin Database rrdtool.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um beliebigen Programmcode auszuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, um einen SQL-Injection Angriff durchzuf\u00fchren, um Dateien zu manipulieren, und um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1931 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1931 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1931"
      },
      {
        "category": "external",
        "summary": "changelog information for Cacti 1.2.31 vom 2026-06-15",
        "url": "https://www.cacti.net/info/changelog"
      }
    ],
    "source_lang": "en-US",
    "title": "Cacti: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-15T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-16T09:34:52.588+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1931",
      "initial_release_date": "2026-06-15T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-06-15T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.2.31",
                "product": {
                  "name": "Open Source Cacti \u003c1.2.31",
                  "product_id": "T055402"
                }
              },
              {
                "category": "product_version",
                "name": "1.2.31",
                "product": {
                  "name": "Open Source Cacti 1.2.31",
                  "product_id": "T055402-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cacti:cacti:1.2.31"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Cacti"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-1513",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-1513"
    },
    {
      "cve": "CVE-2026-22802",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-22802"
    },
    {
      "cve": "CVE-2026-32935",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-32935"
    },
    {
      "cve": "CVE-2026-39893",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39893"
    },
    {
      "cve": "CVE-2026-39894",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39894"
    },
    {
      "cve": "CVE-2026-39895",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39895"
    },
    {
      "cve": "CVE-2026-39896",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39896"
    },
    {
      "cve": "CVE-2026-39897",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39897"
    },
    {
      "cve": "CVE-2026-39898",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39898"
    },
    {
      "cve": "CVE-2026-39899",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39899"
    },
    {
      "cve": "CVE-2026-39900",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39900"
    },
    {
      "cve": "CVE-2026-39902",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39902"
    },
    {
      "cve": "CVE-2026-39938",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39938"
    },
    {
      "cve": "CVE-2026-39939",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39939"
    },
    {
      "cve": "CVE-2026-39947",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39947"
    },
    {
      "cve": "CVE-2026-39948",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39948"
    },
    {
      "cve": "CVE-2026-39949",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39949"
    },
    {
      "cve": "CVE-2026-39950",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39950"
    },
    {
      "cve": "CVE-2026-39951",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39951"
    },
    {
      "cve": "CVE-2026-39952",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39952"
    },
    {
      "cve": "CVE-2026-39955",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39955"
    },
    {
      "cve": "CVE-2026-40078",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40078"
    },
    {
      "cve": "CVE-2026-40079",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40079"
    },
    {
      "cve": "CVE-2026-40080",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40080"
    },
    {
      "cve": "CVE-2026-40081",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40081"
    },
    {
      "cve": "CVE-2026-40082",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40082"
    },
    {
      "cve": "CVE-2026-40083",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40083"
    },
    {
      "cve": "CVE-2026-40084",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40084"
    },
    {
      "cve": "CVE-2026-40194",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40194"
    },
    {
      "cve": "CVE-2026-40941",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40941"
    },
    {
      "cve": "CVE-2026-41884",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-41884"
    },
    {
      "cve": "CVE-2026-44481",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-44481"
    },
    {
      "cve": "CVE-2026-46531",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-46531"
    }
  ]
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

WID-SEC-W-2026-1931

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.