VulnSocial

CVE-2026-39949Disclosure

LOW

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 3 signals
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 3 mentions on most recent observed day (2026-06-17)
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-16: 1Mentions · 2026-06-17: 3PoC Mentioned / Linked · 2026-06-16: 1PoC Mentioned / Linked · 2026-06-17: 2Patch / Workaround · 2026-06-17: 1Technical Details · 2026-06-16: 1Technical Details · 2026-06-17: 206-1606-17
Signal classification2 categories
Disclosure
375.0%
Patch
125.0%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-06-161
Disclosure1
2026-06-173
Disclosure2Patch1
Full discourse4 posts
  • Nicolas Krassas@Dinosn
    Disclosure

    CVE-2026-39949: Authenticated Remote Code Execution in Cacti ≤ 1.2.30 https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2026-39949.md

    Post summary

    The post announces CVE-2026-39949, an authenticated remote code execution flaw in Cacti versions up to 1.2.30, and links to a GitHub file that likely contains the technical details.

    15020122.2K
    159.6K followersView on X
  • ✪ 𝕱𝖆𝖍𝖆𝖉@fad_777
    Patch

    ثغرة خطيرة تستهدف Cacti. تتيح CVE 2026 39949 تنفيذ أوامر عن بعد لمستخدم موثّق في Cacti الإصدار 1.2.30 وما قبله. التحديث ومراجعة التعرض أولوية واضحة. Critical risk for Cacti deployments. CVE 2026 39949 enables authenticated remote code execution in Cacti ≤ 1.2.30. Prioritize validation, patching, and exposure review. https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2026-39949.md #Cacti #CVE202639949 #RemoteCodeExecution

    Post summary

    The post highlights CVE-2026-39949 as a critical authenticated remote code execution bug in Cacti versions 1.2.30 and older, links to a disclosure likely containing a PoC, and stresses the urgency of patching and exposure review.

    0000053
    78 followersView on X
  • Autumn Good@autumn_good_35
    Disclosure

    CVE-2026-39949の認証後OSコマンドインジェクションの詳細 Vulnerability-Disclosures/CVE-2026-39949.md at main · lukehebe/Vulnerability-Disclosures · GitHub https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2026-39949.md

    Post summary

    The text refers to a GitHub link supposedly containing details of CVE‑2026‑39949, indicating a vulnerability disclosure, but no further technical information, PoC, or exploit details are provided in the excerpt.

    00000665
    6.9K followersView on X
  • Luke@lheben_
    Disclosure

    CVE-2026-39949 : Authenticated Remote Code Execution in Cacti ≤ 1.2.30 Recently while testing Cacti, I discovered an authenticated RCE that allows a user with graph/device management permissions to execute arbitrary commands on the system. Full writeup: https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2026-39949.md

    Post summary

    An authenticated remote code execution vulnerability has been disclosed for Cacti versions up to 1.2.30, with a written report available that includes potential PoC details.

    0000084
    93 followersView on X

Explore more

Back to dashboard