cacti vulnerabilities and fixes

Recent CVEs affecting cacti, with upgrade or downgrade steps. 15 tracked.

cacti has 15 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 15. Most recent: 2026-06-25. Highest priority: CVE-2026-40079 (score 62/100).

• CVE-2026-40083 HIGH 7.2 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-40080 MEDIUM 6.1 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-40082 MEDIUM 5.4 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-40084 MEDIUM 6.5 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-40941 MEDIUM 6.5 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39951 HIGH 7.6 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39955 CRITICAL 9.8 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39948 CRITICAL 9.8 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39938 CRITICAL 9.8 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39893 CRITICAL 9.8 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-40079 CRITICAL 9.8 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39899 MEDIUM 5.3 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39894 LOW 2.9 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39897 MEDIUM 6.1 UPGRADE Cacti is an open source performance and fault management framework
• CVE-2026-39900 MEDIUM 6.1 UPGRADE Cacti is an open source performance and fault management framework

FAQ

How do I fix cacti vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cacti being exploited right now?

None of the tracked cacti CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cacti CVE should I patch first?

CVE-2026-40079 currently ranks highest (62/100): Cacti is an open source performance and fault management framework.

RSS feed for cacti · ← Back to latest CVEs