Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

WID-SEC-W-2026-1931

Vulnerability from csaf_certbund - Published: 2026-06-15 22:00 - Updated: 2026-06-15 22:00
Summary
Cacti: Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Cacti ist ein grafisches Frontend zur Visualisierung von statistischen Daten, erfasst durch die Round Robin Database rrdtool.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um Informationen offenzulegen.
Betroffene Betriebssysteme: - Linux - UNIX - Windows
CVE-2026-1513
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-22802
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-32935
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39893
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39894
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39895
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39896
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39897
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39898
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39899
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39900
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39902
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39938
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39939
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39947
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39948
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39949
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39950
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39951
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39952
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-39955
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40078
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40079
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40080
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40081
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40082
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40083
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40084
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40194
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-40941
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-41884
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-44481
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
CVE-2026-46531
Affected products
Product Identifier Version Remediation
Open Source Cacti <1.2.31
Open Source / Cacti
 <1.2.31
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Cacti ist ein grafisches Frontend zur Visualisierung von statistischen Daten, erfasst durch die Round Robin Database rrdtool.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um beliebigen Programmcode auszuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, um einen SQL-Injection Angriff durchzuf\u00fchren, um Dateien zu manipulieren, und um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1931 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1931 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1931"
      },
      {
        "category": "external",
        "summary": "changelog information for Cacti 1.2.31 vom 2026-06-15",
        "url": "https://www.cacti.net/info/changelog"
      }
    ],
    "source_lang": "en-US",
    "title": "Cacti: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-15T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-16T09:34:52.588+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1931",
      "initial_release_date": "2026-06-15T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-06-15T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.2.31",
                "product": {
                  "name": "Open Source Cacti \u003c1.2.31",
                  "product_id": "T055402"
                }
              },
              {
                "category": "product_version",
                "name": "1.2.31",
                "product": {
                  "name": "Open Source Cacti 1.2.31",
                  "product_id": "T055402-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:cacti:cacti:1.2.31"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Cacti"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-1513",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-1513"
    },
    {
      "cve": "CVE-2026-22802",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-22802"
    },
    {
      "cve": "CVE-2026-32935",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-32935"
    },
    {
      "cve": "CVE-2026-39893",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39893"
    },
    {
      "cve": "CVE-2026-39894",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39894"
    },
    {
      "cve": "CVE-2026-39895",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39895"
    },
    {
      "cve": "CVE-2026-39896",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39896"
    },
    {
      "cve": "CVE-2026-39897",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39897"
    },
    {
      "cve": "CVE-2026-39898",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39898"
    },
    {
      "cve": "CVE-2026-39899",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39899"
    },
    {
      "cve": "CVE-2026-39900",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39900"
    },
    {
      "cve": "CVE-2026-39902",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39902"
    },
    {
      "cve": "CVE-2026-39938",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39938"
    },
    {
      "cve": "CVE-2026-39939",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39939"
    },
    {
      "cve": "CVE-2026-39947",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39947"
    },
    {
      "cve": "CVE-2026-39948",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39948"
    },
    {
      "cve": "CVE-2026-39949",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39949"
    },
    {
      "cve": "CVE-2026-39950",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39950"
    },
    {
      "cve": "CVE-2026-39951",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39951"
    },
    {
      "cve": "CVE-2026-39952",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39952"
    },
    {
      "cve": "CVE-2026-39955",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-39955"
    },
    {
      "cve": "CVE-2026-40078",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40078"
    },
    {
      "cve": "CVE-2026-40079",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40079"
    },
    {
      "cve": "CVE-2026-40080",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40080"
    },
    {
      "cve": "CVE-2026-40081",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40081"
    },
    {
      "cve": "CVE-2026-40082",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40082"
    },
    {
      "cve": "CVE-2026-40083",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40083"
    },
    {
      "cve": "CVE-2026-40084",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40084"
    },
    {
      "cve": "CVE-2026-40194",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40194"
    },
    {
      "cve": "CVE-2026-40941",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-40941"
    },
    {
      "cve": "CVE-2026-41884",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-41884"
    },
    {
      "cve": "CVE-2026-44481",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-44481"
    },
    {
      "cve": "CVE-2026-46531",
      "product_status": {
        "known_affected": [
          "T055402"
        ]
      },
      "release_date": "2026-06-15T22:00:00.000+00:00",
      "title": "CVE-2026-46531"
    }
  ]
}