In this analysis, we explore CVE-2026-40083, a SQL Injection vulnerability present in Cacti versions 1.2.30 and earlier. The flaw allows an authenticated user with SNMP management privileges to execute arbitrary SQL queries by manipulating the "selected_graphs_array" parameter, exploiting an insecure concatenation of deserialized data into SQL queries. As a result, an attacker can extract sensitive information from the database, compromise credentials, access critical configurations of the monitored infrastructure, and in certain scenarios, impact the application's availability. In this publication, we detail the root cause of the vulnerability, its exploitation, the fix implemented by the Cacti team, and the key recommendations for risk mitigation. Authors: João Pedro Gonçalves & Gabriel Rodrigues @Gabriel52489026 Check it out https://hakaisecurity.io/en-cve-2026-40083-sql-injection-in-cacti/research-blog
Post summary
The post discloses a new SQL injection flaw in older Cacti versions, details its exploitation path, and announces that the vendor has released a fix to remediate the vulnerability.
