diff options
| author | Rodrigo Osorio <rodrigo@FreeBSD.org> | 2026-07-07 13:39:25 +0000 |
|---|---|---|
| committer | Rodrigo Osorio <rodrigo@FreeBSD.org> | 2026-07-07 16:49:44 +0000 |
| commit | 122b8b97c881c838bc6a4d88fb869acbcf6ec195 (patch) | |
| tree | 2f4c10582886889488cbc4505530347b0805c823 | |
| parent | 1a398312bf029ba658e38cde34f8b3dffc8316bc (diff) | |
security/vuxml: add net-mgmt/cacti vuln entries
| -rw-r--r-- | security/vuxml/vuln/2026.xml | 92 |
1 files changed, 92 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index 5bad36e77832..a78231aa9b90 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,95 @@ + <vuln vid="9647af6d-7a05-11f1-99fc-40b034429ecf"> + <topic>cacti -- multiple vulnerabilities</topic> + <affects> +<package> +<name>cacti</name> +<range><lt>1.2.31</lt></range> +</package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Cacti project reports:</p> + <blockquote cite="https://github.com/Cacti/cacti/releases/tag/release%2F1.2.31"> + <p>This release includes fixes for a number of vulnerabilities that were responsibly disclosed by external researchers</p> + <ul> + <li>CVE-2026-39894 RRDtool metric shift via LC_NUMERIC locale comma decimal formatting</li> + <li>CVE-2026-40082 Session Fixation via missing session_regenerate_id() after login</li> + <li>CVE-2026-40941 Package Import Signature Validation Bypass allows self-signed packages</li> + <li>CVE-2026-39897 Reflected XSS in html_auth_footer error message output</li> + <li>CVE-2026-39900 Reflected XSS via tab parameter in auth_profile.php JavaScript context</li> + <li>CVE-2026-46531 SQL Injection in automation_tree_rules.php</li> + <li>CVE-2026-44481 Pre-auth Open Redirect via link.php Referer header</li> + <li>CVE-2026-39952 Stored XSS in Report Tree expansion titles</li> + <li>CVE-2026-39893 Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php</li> + <li>CVE-2026-22802 Authentication Bypass leads to information disclosure</li> + <li>CVE-2026-40080 Open Redirect via HTTP_REFERER substring check in auth_login_redirect</li> + <li>CVE-2026-40078 Backend ORDER BY SQL Injection</li> + <li>CVE-2026-39949 Authenticated Remote Code Execution via Host Variable Injection</li> + <li>CVE-2026-40081 Reports IDOR allows any authenticated user to modify other users' reports (CWE-639)</li> + <li>CVE-2026-39948 SQL Injection via rfilter parameter in RLIKE clauses</li> + <li>CVE-2026-39902 Authenticated RCE on Data Input</li> + <li>CVE-2026-39898 Reflected XSS via rfilter parameter in aggregate_graphs.php input value</li> + <li>CVE-2026-41884 Arbitrary File Read via Reports format_file path traversal</li> + <li>CVE-2026-39955 Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php</li> + <li>CVE-2026-39896 TOCTOU race in auth_process_lockout allows brute-force lockout bypass</li> + <li>CVE-2026-39950 Arbitrary PHP file write via Plugin Archive extraction leading to RCE</li> + <li>CVE-2026-40083 SQL Injection in managers.php via uncast array values in IN clauses</li> + <li>CVE-2026-40084 Arbitrary File Read via path traversal in Report format_file parameter</li> + <li>CVE-2026-39951 Stored SQL Injection via graph_name_regexp in Reports feature</li> + <li>CVE-2026-39899 Path traversal via filename parameter in package_import.php</li> + <li>CVE-2026-39938 Unauthenticated LFI via graph_theme and rrdtool IPC serialization hardening</li> + <li>CVE-2026-39939 Path traversal in Package Import file write allows arbitrary file creation in webroot</li> + <li>CVE-2026-39947 RRDtool IPC pipe poisoning via is_numeric newline bypass in rrdtool_function_update</li> + <li>CVE-2026-39895 Second-order RCE via unescaped log path in exec_background shell redirection</li> + <li>CVE-2026-40079 Command Injection via escape_command() no-op in RRDtool execution</li> + <li>CVE-2026-40194, CVE-2026-32935 in phpseclib - This is breaking change for RRDProxy</li> + <li>CVE-2026-1513 billboard.js before 3.18.0 Improper Input Sanitization Allows Remote JavaScript Execution</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-39894</cvename> + <cvename>CVE-2026-40082</cvename> + <cvename>CVE-2026-40941</cvename> + <cvename>CVE-2026-39897</cvename> + <cvename>CVE-2026-39900</cvename> + <cvename>CVE-2026-46531</cvename> + <cvename>CVE-2026-44481</cvename> + <cvename>CVE-2026-39952</cvename> + <cvename>CVE-2026-39893</cvename> + <cvename>CVE-2026-22802</cvename> + <cvename>CVE-2026-40080</cvename> + <cvename>CVE-2026-40078</cvename> + <cvename>CVE-2026-39949</cvename> + <cvename>CVE-2026-40081</cvename> + <cvename>CVE-2026-39948</cvename> + <cvename>CVE-2026-39902</cvename> + <cvename>CVE-2026-39898</cvename> + <cvename>CVE-2026-41884</cvename> + <cvename>CVE-2026-39955</cvename> + <cvename>CVE-2026-39896</cvename> + <cvename>CVE-2026-39950</cvename> + <cvename>CVE-2026-40083</cvename> + <cvename>CVE-2026-40084</cvename> + <cvename>CVE-2026-39951</cvename> + <cvename>CVE-2026-39899</cvename> + <cvename>CVE-2026-39938</cvename> + <cvename>CVE-2026-39939</cvename> + <cvename>CVE-2026-39947</cvename> + <cvename>CVE-2026-39895</cvename> + <cvename>CVE-2026-40079</cvename> + <cvename>CVE-2026-40194</cvename> + <cvename>CVE-2026-32935</cvename> + <cvename>CVE-2026-1513</cvename> + <url>https://github.com/Cacti/cacti/releases/tag/release%2F1.2.31</url> + </references> + <dates> + <discovery>2026-06-16</discovery> + <entry>2026-07-07</entry> + </dates> + </vuln> + <vuln vid="a3a34818-79a0-11f1-b295-98b78501ef2a"> <topic>xrdp -- multiple vulnerabilities</topic> <affects> |