Security Advisory

CVE-2025-26520

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-02-12 00:00:00

Last updated 2025-02-12 16:02:53

Assigner mitre

CVSS score 7.6

State PUBLISHED

Description

Cacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the graph_template parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146.

← Browse all CVEs View on cve.org ↗