CVE-2026-39893

creationtimestamp| type| source ---|---|--- 2026-06-25 13:45:15+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-cacti-1 2026-06-26 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5zddf5wr2x 2026-07-02 00:00:50+00:00| seen|...

CVE-2026-39893

Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request variable was concatenated into a RLIKE SQL clause without sanitization. The endpoint does not require authentication graph viewing supports guest access via the configured guest...