CVE-2022-46169β€”Cacti Command Injection Vulnerability

PUBLISHEDvulnerability record
2023-02-16 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-46169
Project:
Cacti
Product:
Cacti
Date Added:
2023-02-16
Due Date:
2023-03-09
Last Updated:
June 21, 2025

Vulnerability Name

Cacti Command Injection Vulnerability

Description

Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf
  • https://nvd.nist.gov/vuln/detail/CVE-2022-46169

Related Weaknesses

browse all CVEs