CVE-2026-39951
HIGH
NVD
CVSS Score
7.6
Severity
HIGH
Published
Jun 25, 2026
Vendor
unknown
Description
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph_name_regexp in the Reports feature. This issue has been fixed in version 1.2.31.