CVE-2007-3112: graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a...

Security readout for executives and security teams

CVE-2007-3112 is a historical Cacti denial-of-service issue. An authenticated user could make Cacti consume excessive CPU through graph image parameters, potentially disrupting monitoring visibility. The source bundle identifies Cacti 0.8.6i and says other versions may be affected, but does not provide a complete affected range or CVSS score. Exposure is most likely where older Cacti deployments, especially 0.8.6i, remain reachable by authenticated users. Risk is lower when Cacti is patched, decommissioned, or restricted to a small trusted administrative network. Prioritize if Cacti is still used for operational monitoring or exposed to many authenticated users. The main business impact is loss or degradation of monitoring, which can delay incident detection and response. Mitigation focus: Inventory Cacti deployments and identify any 0.8.6i or similarly old versions.; Apply vendor or distribution Cacti updates where available.; Restrict Cacti access to trusted users and administrative networks..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.