← KEV catalog
CISA known exploited vulnerability

CVE-2022-46169

Cacti Command Injection Vulnerability

SOURCE FACT

Cacti · Cacti

Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.

Required action

Apply updates per vendor instructions.

CISA notes

https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf; https://nvd.nist.gov/vuln/detail/CVE-2022-46169

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?