CVE-2026-39951 | Cacti up to 1.2.30 Reports Feature sql injection (GHSA-pf37-v86f-5xwp)

June 25, 2026 Yanac

A vulnerability labeled as critical has been found in Cacti up to 1.2.30. Affected by this issue is some unknown functionality of the component Reports Feature. The manipulation results in sql injection.

This vulnerability is reported as CVE-2026-39951. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More