Authenticated Stored SQL Injection in Cacti Performance Management Framework
CVE-2026-46531

5.5MEDIUM

Key Information:

Vendor

Cacti

Status
Cacti
Vendor
CVE Published:
23 October 2026

What is CVE-2026-46531?

Cacti, an open-source performance and fault management framework, is vulnerable to an authenticated stored SQL injection affecting versions 1.2.27 through 1.2.30. This issue arises from the ability of a user with the Automation realm (default General Administration role) to input arbitrary SQL fragments into the automation_tree_rule_items.field column. These fragments are subsequently concatenated into a SQL SELECT statement, leading to unauthorized data access when automation rules are applied. The vulnerability compromises the integrity of the application, allowing attackers to execute unauthorized database queries. The issue has been addressed in version 1.2.31, and it is critical for users to upgrade to this version to maintain system security.

Affected Version(s)

cacti >= 1.2.27, < 1.2.31

References

https://github.com/Cacti/cacti/security/advisories/GHSA-3...
x_refsource_CONFIRM
https://github.com/Cacti/cacti/pull/7163
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.