CVE-2026-40084 | Cacti up to 1.2.30 lib/html_reports.php Save path traversal (GHSA-mjvw-mhj5-9jcj)

June 26, 2026 Yanac

A vulnerability labeled as critical has been found in Cacti up to 1.2.30. Affected is an unknown function in the library lib/html_reports.php. The manipulation of the argument Save results in path traversal.

This vulnerability is identified as CVE-2026-40084. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More