CVE-2026-39938

9.8

CRITICALCVSS v3

Published

June 24, 2026

Affected

5 projects

Assigned by

GitHub

Severity scale

010

Description

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool IPC serialization hardening. This issue has been resolved in version 1.2.31.

Cacti/cacti

GitHubCacti ™

< 1.2.31NVD

cacti

Python Package IndexThis is a torch data load package.

< 1.2.31NVD

cacti

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

cacti

< 1.2.31NVD

cacti

NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'

< 1.2.31NVD

cacti

Debian Bookwormweb interface for graphing of monitoring systems

< 1.2.31NVD

Security Advisories

CVE-2026-39938

Description

More on this CVE