Open Redirect Vulnerability in Cacti Performance Management Framework

CVE-2026-40080

What is CVE-2026-40080?

Cacti, an open-source performance and fault management framework, is susceptible to an Open Redirect vulnerability. This issue arises from inadequate validation during the redirect process, where the system checks for a substring in the HTTP referer instead of the host. As a result, if a user's login options are set to redirect after logging in, they could be inadvertently redirected to a malicious site. Specifically, an attacker could exploit this flaw by crafting a referer such as 'https://evil.com/cacti/', which successfully matches the generic path used by Cacti. The vulnerability, discovered in versions prior to 1.2.31, has since been addressed in an update that includes proper validation mechanisms to prevent such exploitative redirects.

References