CVE-2009-4112: Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Da...

Security readout for executives and security teams

CVE-2009-4112 affects Cacti 0.8.7e and earlier. A logged-in Cacti administrator could change a monitoring configuration field so the server runs arbitrary commands. This is mainly a risk where old Cacti deployments still exist or where Cacti admin accounts are broadly shared or compromised. Exposure is limited to Cacti 0.8.7e and earlier, especially internet-accessible or internally shared instances with active administrator accounts. The provided affected-product metadata is incomplete, so asset validation should rely on installed Cacti version and distribution package records. Treat as a cleanup priority for legacy monitoring systems. It is not evidenced as actively exploited here, but old Cacti admin access can become a path to server command execution if credentials are misused or compromised. Mitigation focus: Identify and retire or upgrade Cacti 0.8.7e and earlier instances.; Check current Cacti and operating-system vendor guidance for supported fixed versions.; Review openSUSE advisories if using SUSE-packaged Cacti..

Prepared

Jun 28, 2026, 12:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.