CVE-2026-40079
Cacti is an open source performance and fault management framework. Ve ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD.
Beschreibung
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization in the escape_command() function. The escape_command() function at lib/rrd.php is a no-op: it returns $command unchanged. The command line built by rrdtool_function_graph() is passed through this function and then to shell_exec($full_commandline). The risk is in __rrd_execute() where text_format values from graph templates (which may contain host variable substitutions) reach shell_exec without adequate escaping. This issue has been addressed in version 1.2.31.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.24 | cacti | 1.2.31-0 |
| alpine edge | cacti | 1.2.31-0 |
| debian 11 | cacti | kein Fix angegeben |
| debian 12 | cacti | kein Fix angegeben |
| debian 13 | cacti | kein Fix angegeben |
| debian 14 | cacti | 1.2.31+ds1-1 |
| echo | cacti | kein Fix angegeben |
| rapidfort debian 12 | cacti | 0:1.2.31+ds1-1 |
| rapidfort debian 13 | cacti | 0:1.2.31+ds1-1 |