Likely 0-day
Cacti instance has guest user access enabled, allowing unauthenticated users to access graph_view.php and potentially other resources.
id: cacti-guest-access-enabled
info:
name: Cacti - Guest User Access Enabled
author: DhiyaneshD
...