CVE-2026-39949

CVE-2026-39949: ホスト変数インジェクションによる Cacti の認証済みリモートコード実行 概要 Cacti ≤ 1.2.30 の OS コマンドインジェクションの脆弱性により、デバイスおよびグラフテンプレート作成権限を持つ認証済みユーザーは、基盤となるサーバー上で任意のコマンドを実行できます。この欠陥は、ユーザーが制御するホストメタデータフィールド（具体的にはデバイスのメモ欄）が、Cacti の変数置換エンジンを介して RRDtool...

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 认证远程代码执行 PoC 该仓库包含针对 CVE-2025-24367 的概念验证利用代码，该漏洞是 Cacti 中的一个认证远程代码执行漏洞。 该问题利用了图形模板处理中输入清理不足的缺陷。通过向 “Unix – Logged in Users” 图形模板（ID 226）中注入恶意内容，可以向 Cacti Web 根目录写入任意 PHP 文件，并在服务器上执行命令。 此 PoC 仅用于 实验室环境、受控测试和研究目的 。 漏洞摘要 产品： Cacti 漏洞类型： 认证远程代码执行 CVE 编号： CVE-2025-24367 攻击向量：...

SUSE-SU-2026:23119-1 Security update for rrdtool

This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...

SUSE SLES15 Security Update : rrdtool (SUSE-SU-2026:3449-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3449-1 advisory. This update for rrdtool fixes the following issue - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local...

Security update for rrdtool

This update for rrdtool fixes the following issue: CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

SUSE-SU-2026:3468-1 Security update for rrdtool

This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...

Security update for rrdtool

This update for rrdtool fixes the following issue CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

SUSE-SU-2026:3449-1 Security update for rrdtool

This update for rrdtool fixes the following issue - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege escalation via unbounded DS/RRA arguments bsc1267243...

TencentOS Server 3: rrdtool (TSSA-2026:0622)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0622 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

rrdtool security update

1.8.0-21 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264...

Alibaba Cloud Linux 3 : 0186: rrdtool (ALINUX3-SA-2026:0186)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0186 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-43958: A flaw was found in rrdcached, a...

RLSA-2026:33731 Moderate: rrdtool security update

The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create application...

rrdtool security update

An update is available for rrdtool. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The round robin database RRD system stores and displays time-series data, su...

RockyLinux 10 : rrdtool (RLSA-2026:33731)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:33731 advisory. rrdtool: Stack buffer overflow in rrdcached handlerequestcreate allows local privilege escalation via unbounded DS/RRA arguments CVE-2026-43958 Tenable has...

MiracleLinux 8 : rrdtool-1.7.0-17.el8_10 (AXSA:2026-1189:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1189:01 advisory. rrdtool: Stack buffer overflow in rrdcached handlerequestcreate allows local privilege escalation via unbounded DS/RRA arguments CVE-2026-43958 Tenable has...

RockyLinux 9 : rrdtool (RLSA-2026:34156)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:34156 advisory. rrdtool: Stack buffer overflow in rrdcached handlerequestcreate allows local privilege escalation via unbounded DS/RRA arguments CVE-2026-43958 Tenable has...

RLSA-2026:34156 Moderate: rrdtool security update

The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create application...

RLSA-2026:34155 Moderate: rrdtool security update

The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create application...

rrdtool security update

An update is available for rrdtool. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The round robin database RRD system stores and displays time-series data, suc...

RockyLinux 8 : rrdtool (RLSA-2026:34155)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:34155 advisory. rrdtool: Stack buffer overflow in rrdcached handlerequestcreate allows local privilege escalation via unbounded DS/RRA arguments CVE-2026-43958 Tenable has...