Package: cacti (1.2.24+ds1-1+deb12u5)

web interface for graphing of monitoring systems

Other Packages Related to cacti:

  • rec: [apache2]

    Apache HTTP Server

  • rec: [lighttpd]

    fast webserver with minimal memory footprint

  • rec: [nginx]

    server web/proxy piccolo, potente e scalabile

  • rec: httpd

    Package not available

  • rec: [default-mysql-server]

    MySQL database server binaries and system database setup (metapackage)

  • rec: virtual-mysql-server

    Package not available

  • rec: [inetutils-ping]

    Strumento di eco ICMP

  • rec: [iputils-ping]

    Tools to test the reachability of network hosts

  • rec: [logrotate]

    Log rotation utility

  • sug: [cacti-spine]

    Multi-Threading poller for cacti

  • sug: [moreutils]

    additional Unix utilities

  • sug: [snmpd]

    agenti SNMP (Simple Network Management Protocol)

Download cacti

ArchitecturePackage sizeInstalled sizeFilesPackage
all27 MiB46 MiBlist of filesDownload

Percorsi file del pacchetto (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.2.24+ds1-1+deb12u5bookworm / mainallDebian 12 · main · amd6427 MiB46 MiBpool/main/c/cacti/cacti_1.2.24+ds1-1+deb12u5_all.deb
1.2.24+ds1-1+deb12u5bookworm / mainallDebian 12 · main · arm6427 MiB46 MiBpool/main/c/cacti/cacti_1.2.24+ds1-1+deb12u5_all.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVEGravitàImpatto per versione
[CVE-2026-71287]

Cacti's sanitize_sql_column (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits, underscore, parentheses, and dot (intend

High(8.8)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39893]

Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request variable was concatenated into a RLIKE SQL clause without sanitization. The endpoi

Critical(9.8)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39894]

Cacti is an open source performance and fault management framework. In versions 1.2.30 and below, the locale-dependent decimal formatting in rrdtool_function_update() can corrupt RRDtool metric values

Low(2.9)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39897]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and below contain a Reflected XSS vulnerability in the html_auth_footer. This issue has been fixed in version 1.2.31

Medium(5.3)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39899]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal via filename parameter in package_import.php. This issue has been fixed i

Medium(6.9)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39900]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the auth_profile.php JavaScript context. This issue h

Medium(5.3)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39938]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool IPC serialization hardening. This issue has been

Critical(9.8)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39948]

Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request parameter is retrieved via the raw accessor grv() (rather than gfrv() with FILTER_

Critical(9.3)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39951]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph_name_regexp in the Reports feature. This issue has

High(7.6)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-39955]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have pre-authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php. This issue

Critical(9.8)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-40079]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization in the escape_command() function. The esca

High(8.6)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-40080]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a substring check rather than a host check at str_contains($refere

Medium(6.1)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-40082]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after login, leading to Session Fixation. session_regenerate_id() is

Medium(5.4)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-40083]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in managers.php. At line 756 of managers.php,

High(7.2)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-40084]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the Report format_file Parameter, causing arbitrary file read. T

Medium(6.5)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2026-40941]

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has

High(7.1)Interessata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2020-7058]

cacti: CVE-2020-7058

LowInteressata
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Interessata

    dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

Versioni corrette e non interessate (3)
CVEGravitàImpatto per versione
[CVE-2005-10004]

Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET paramet

High(8.7)Corretta
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Corretta · Corretta: 0.8.6d-1

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Corretta · Corretta: 0.8.6d-1

    nvd · cacti · debian · bookworm; nvd · cacti · debian · 12

[CVE-2022-41444]

cacti: CVE-2022-41444

MediumCorretta
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Corretta · Corretta: 1.2.22+ds1-1

    dsa · cacti · debian · bookworm

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Corretta · Corretta: 1.2.22+ds1-1

    dsa · cacti · debian · bookworm

[CVE-2022-48538]

cacti: CVE-2022-48538

LowCorretta
Dettagli (2)
  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Corretta · Corretta: 1.2.23+ds1-1

    dsa · cacti · debian · bookworm

  • 1.2.24+ds1-1+deb12u5 · all · bookworm

    Corretta · Corretta: 1.2.23+ds1-1

    dsa · cacti · debian · bookworm

[Altri risultati]

Ultima sincronizzazione:

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.2.24+ds1-1+deb12u5 / allOsservato Sep 1, 2026sha256 cac0a7709293…2465cdefImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): cac0a770929352bc03cabdff5420ce5d06159e48bab5fece12dfa5792465cdef

Verifica download

printf '%s %s\n' 'cac0a770929352bc03cabdff5420ce5d06159e48bab5fece12dfa5792465cdef' 'cacti_1.2.24+ds1-1+deb12u5_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

1.2.24+ds1-1+deb12u5 / allOsservato Sep 1, 2026sha256 cac0a7709293…2465cdefImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): cac0a770929352bc03cabdff5420ce5d06159e48bab5fece12dfa5792465cdef

Verifica download

printf '%s %s\n' 'cac0a770929352bc03cabdff5420ce5d06159e48bab5fece12dfa5792465cdef' 'cacti_1.2.24+ds1-1+deb12u5_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Fonti

  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified