PT-2026-52134 · Cacti · Cacti

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-39899

Mitre

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal via filename parameter in package import.php. This issue has been fixed in version 1.2.31.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-39899

Produtos afetados

Cacti

Referências · 3

• https://github.com/Cacti/cacti/security/advisories/GHSA-pr9x-34w8-4mf7 · Nota
• https://github.com/Cacti/cacti/pull/6899 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-39899 · Nota de Segurança