CVE-2026-39900— Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context
Possible ATT&CK Techniques 1AI
T1189 · Drive-by CompromiseGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-39900
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context
Source: CVE Program / CVE List V5
Vulnerability Description
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the auth_profile.php JavaScript context. This issue has been fixed in version 1.2.31.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Cacti 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cacti是Cacti团队开源的一款日志分析与审计软件。 Cacti 1.2.30及之前版本存在跨站脚本漏洞，该漏洞源于在auth_profile.php的JavaScript环境中通过tab参数容易受到反射型跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-39900
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-39900
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-39900 (1)
Same Patch Batch · Cacti · 2026-06-24 · 10 CVEs total
| CVE-2026-39955 | 9.8 CRITICAL | Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph |
| CVE-2026-39893 | 9.8 CRITICAL | Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php |
| CVE-2026-39938 | 9.8 CRITICAL | Cacti: Unauthenticated RCE on Graph Image |
| CVE-2026-39951 | 7.6 HIGH | Cacti: Stored SQL Injection via graph_name_regexp in Reports feature |
| CVE-2026-39894 | 2.9 LOW | Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting |
| CVE-2026-39897 | Cacti has a Reflected XSS Vulnerability via html_auth_footer | |
| CVE-2026-39948 | Cacti has SQL Injection via rfilter parameter in RLIKE clauses | |
| CVE-2026-39899 | Cacti: Path Traversal via filename parameter in package_import.php | |
| CVE-2026-40079 | Cacti: Command Injection via escape_command() no-op in RRDtool execution |
IV. Related Vulnerabilities
Same product: cacti
- CVE-2026-71287
Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time - CVE-2026-40941
Cacti: Package Import Signature Validation Bypass Allows Sel - CVE-2026-40084
Cacti: Arbitrary File Read via Path Traversal in Report `for - CVE-2026-40083
Cacti: SQL Injection in managers.php - CVE-2026-40082
Cacti: Session Fixation via missing session_regenerate_id()
Same vendor: Cacti
- CVE-2026-71287
Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time - CVE-2026-40941
Cacti: Package Import Signature Validation Bypass Allows Sel - CVE-2026-40084
Cacti: Arbitrary File Read via Path Traversal in Report `for - CVE-2026-40083
Cacti: SQL Injection in managers.php - CVE-2026-40082
Cacti: Session Fixation via missing session_regenerate_id()
Same weakness: CWE-79
- CVE-2026-19434
Stored Cross-site Scripting in Pentestify finding severity f - CVE-2026-72747
AVideo Stored Cross-Site Scripting via Unauthenticated Regis - CVE-2026-72559
Daniel Brendel HortusFox - Cross-Site Scripting - CVE-2026-72553
ElkArte Forum ElkArte - Cross-Site Scripting - CVE-2026-73161
cti-transmute Conversion Table Allows XSS via Unescaped Cell
V. Comments for CVE-2026-39900
No comments yet