Security Advisory

Cacti Security Update Advisory (CVE-2025-22604)

  • Jan 31 2025

Overview

We have released a security update to address a vulnerability in Cacti. Affected product users are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-22604

Cacti Version: ~1.2.8 (inclusive)

 

 

Resolved Vulnerabilities

Blind SQL Injection Vulnerability (CVE-2025-22604)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-22604

Cacti Version: 1.2.29

 

 

References

[1] Authenticated RCE via multi-line SNMP responses
https://github.com/Cacti/cacti/security/advisories/GHSA-c5j8-jxj3-hh36

Tags:

Previous Post

Next Post