CVE-2007-3113: Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (...

Security readout for executives and security teams

This issue lets a logged-in Cacti user make the server consume excessive CPU by requesting oversized graph dimensions. The business impact is availability loss for monitoring, not data theft. Evidence is limited to Cacti 0.8.6i and possibly other versions. Exposure is most likely in legacy Cacti deployments, especially 0.8.6i, where authenticated users can access graph rendering functionality. Internet exposure matters less than account access, but shared monitoring portals increase practical risk. Treat as a legacy monitoring availability risk. Prioritize if Cacti is still used for operational visibility, exposed to many users, or relied on during incident response. Mitigation focus: Inventory Cacti instances and identify any 0.8.6i or related legacy versions.; Check Cacti and distribution advisories for the correct fixed package or upgrade path.; Restrict Cacti access to trusted users and administrative networks where possible..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.