CVE-2023-51448: Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP…

PriorityP258high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

9.02%

94.6th percentile

Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cacti	cacti	<= 1.2.25	—
cacti	cacti	—	—
cacti	cacti	>= 0 < 1.2.26+ds1-1	1.2.26+ds1-1
cacti	cacti	>= 0 < 1.2.26+ds1-1	1.2.26+ds1-1
debian	cacti	< cacti 1.2.26+ds1-1 (forky)	cacti 1.2.26+ds1-1 (forky)

Detection & IOCsextracted from sources · hover to see the quote

→Blind SQLi — look for time-delay or boolean-based anomalies in responses from managers.php, as the injection is not directly reflected ↗

·Vulnerability is confirmed only in Cacti version 1.2.25; fixed in 1.2.26+ds1-1 (Debian bookworm, bullseye, forky, sid, trixie) ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv8.8HIGH

vendor_debian8.8LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.