CVE-2026-39949

🗓️ 16 Jun 2026 00:00:00Reported by candidateType

cve📰️ 1 Media mentions👁 30 Views🌐 WEB

CVE-2026-39949 affects Cacti ≤ 1.2.30. A vulnerability in Cacti’s graph-generation variable substitution engine lets authenticated users with graph-management privileges inject host metadata into RRDtool arguments, enabling remote code execution o...

Reporter	Title	Published	Views	Family All 8
GithubExploit	Exploit for CVE-2026-39949	16 Jun 202620:48	–	githubexploit
FreeBSD	cacti -- multiple vulnerabilities	16 Jun 202600:00	–	freebsd
AlpineLinux	CVE-2026-39949	16 Jun 202600:00	–	alpinelinux
BDU FSTEC	The vulnerability of the rrd_substitute_host_query_data() function in the Cacti network monitoring software allows a hacker to execute arbitrary code.	29 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-39949	13 Jul 202622:00	–	circl
Tenable Nessus	FreeBSD : cacti -- multiple vulnerabilities (9647af6d-7a05-11f1-99fc-40b034429ecf)	9 Jul 202600:00	–	nessus
Packet Storm	📄 Cacti 1.2.30 Remote Code Execution	3 Jul 202600:00	–	packetstorm
Positive Technologies	PT-2026-50133	16 Jun 202600:00	–	ptsecurity

Source	Link
github	www.github.com/Cacti/cacti/releases/tag/release%2F1.2.31
github	www.github.com/lukehebe/CVE-2026-39949/tree/main
github	www.github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2026-39949.md
newreleases	www.newreleases.io/project/github/Cacti/cacti/release/release%2F1.2.31
radar	www.radar.offseq.com/threat/cve-2026-39949-authenticated-remote-code-execution-a1ba8c4c
reddit	www.reddit.com/r/cybersecurity/comments/1u7q6ta/cve202639949_authenticated_remote_code_execution
t	www.t.me/GithubRedTeam/89169
t	www.t.me/bdufstecru/3271
web	www.web.nvd.nist.gov/view/vuln/detail

Parameter	Position	Path	Description
action	request body	cacti/host.php	Host notes field is used to inject payload via OS command execution path.
save_component_host	request body	cacti/host.php	Host notes field is used to inject payload via OS command execution path.
notes	request body	cacti/host.php	Host notes field is used to inject payload via OS command execution path.
__csrf_magic	request body	cacti/host.php	Host notes field is used to inject payload via OS command execution path.
id	request body	cacti/host.php	Host notes field is used to inject payload via OS command execution path.
host_template_id	request body	cacti/host.php	Host notes field is used to inject payload via OS command execution path.
polling_id	request body	cacti/host.php	Host notes field is used to inject payload via OS command execution path.
action	request body	cacti/graph_templates.php	Graph template creation references host notes through right_axis_label which facilitates payload injection.
save_component_template	request body	cacti/graph_templates.php	Graph template creation references host notes through right_axis_label which facilitates payload injection.
graph_template_id	request body	cacti/graph_templates.php	Graph template creation references host notes through right_axis_label which facilitates payload injection.

16 Jun 2026 00:00Current