Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization in the escape_command() function. The escape_command() function at lib/rrd.php is a no-op: it returns $command unchanged. The command line built by rrdtool_function_graph() is passed through this function and then to shell_exec($full_commandline). The risk is in __rrd_execute() where text_format values from graph templates (which may contain host variable substitutions) reach shell_exec without adequate escaping. This issue has been addressed in version 1.2.31.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-25 | 3 | Disclosure3 |
| 2026-07-20 | 1 | Disclosure1 |
CVE-2026-40079: Cacti Command Injection Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04q30Yr0
Post summary
The headline announces CVE‑2026‑40079, a command‑injection flaw in Cacti, and promises guidance on how businesses should respond.
CVE-2026-40079 Command Injection in Cacti Versions 1.2.30 and Prior via Unsanitized escape_command() Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40079
Post summary
CVE-2026-40079 is a command injection vulnerability in older Cacti versions stemming from an unsanitized escape_command() function. The post provides a link to general details but does not mention exploits, patches, or active exploitation.
🚨*CVE* CVE-2026-40079 Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization in the e… https://www.cve.org/CVERecord?id=CVE-2026-40079 ----- Traducción: CVE-2026-40079 Cac… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-40079 as a command injection flaw in Cacti 1.2.30 and earlier, noting a sanitization issue, but it provides no PoC, exploit, or patch information.
CVE-2026-40079 Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization in the e… https://www.cve.org/CVERecord?id=CVE-2026-40079
Post summary
The text announces CVE-2026-40079 affects Cacti 1.2.30 and earlier, describing a command injection flaw caused by unsanitized input.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cacti | cacti | - | - | - |