CVE-2026-46531 | Cacti up to 1.2.30 Automation Tree Rule Item lib/api_automation.php create_all_header_nodes sql injection

October 23, 2026 Yanac

A vulnerability marked as problematic has been reported in Cacti up to 1.2.30. Affected by this vulnerability is the function create_all_header_nodes of the file lib/api_automation.php of the component Automation Tree Rule Item Handler. The manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-46531. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More