Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-39899

Опубликовано: 24 июн. 2026
Источник: debian
EPSS Низкий

Описание

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal via filename parameter in package_import.php. This issue has been fixed in version 1.2.31.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
cactifixed1.2.31+ds1-1package

Примечания

  • https://github.com/Cacti/cacti/security/advisories/GHSA-pr9x-34w8-4mf7

  • Fixed by: https://github.com/Cacti/cacti/commit/04372cd553599935ef6629ed03c70ec30d35a653 (release/1.2.31)

EPSS

Процентиль: 21%
0.00283
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal via filename parameter in package_import.php. This issue has been fixed in version 1.2.31.

CVSS3: 5.3
nvd
около 2 месяцев назад

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal via filename parameter in package_import.php. This issue has been fixed in version 1.2.31.

EPSS

Процентиль: 21%
0.00283
Низкий