Cacti
D
RISKY
45
Total CVEs
19
Crit / High
14
Medium
0%
Unpatched
85%
Patched
7.2
Avg CVSS
1
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 45 patched ✗ 0 unpatched ~ 8 under review
Intelligence by Audience
PoC Available
2 / 20 shown
CISA KEV (Exploited)
1
Shodan Dorks
ssl:"cacti" port:443
org:"Cacti" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
45
Critical severity
9
Actively exploited (CISA)
1
Unpatched ratio
0%
Avg CVSS score
7.2
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
Recent CVEs
showing 20 of 53
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-71287 PoC | 8.8 HIGH | PATCH UNDER REVIEW | 0.55% | 2026-08-05 |
| CVE-2026-40941 | 7.1 HIGH | PATCHED / FIX AVAILABLE | 0.27% | 2026-06-25 |
| CVE-2026-40084 | 6.5 MEDIUM | PATCHED / FIX AVAILABLE | 0.49% | 2026-06-25 |
| CVE-2026-40083 | 7.2 HIGH | PATCHED / FIX AVAILABLE | 0.50% | 2026-06-25 |
| CVE-2026-40082 | 5.4 MEDIUM | PATCHED / FIX AVAILABLE | 0.32% | 2026-06-25 |
| CVE-2026-40080 | 6.1 MEDIUM | PATCHED / FIX AVAILABLE | 0.26% | 2026-06-25 |
| CVE-2026-40079 | 8.6 HIGH | PATCH UNDER REVIEW | 1.69% | 2026-06-24 |
| CVE-2026-39951 | 7.6 HIGH | PATCHED / FIX AVAILABLE | 0.40% | 2026-06-24 |
| CVE-2026-39948 | 9.3 CRITICAL | PATCH UNDER REVIEW | 0.85% | 2026-06-24 |
| CVE-2026-39955 | 9.8 CRITICAL | PATCH UNDER REVIEW | 0.58% | 2026-06-24 |
| CVE-2026-39938 | 9.8 CRITICAL | PATCH UNDER REVIEW | 0.69% | 2026-06-24 |
| CVE-2026-39900 | 5.3 MEDIUM | PATCHED / FIX AVAILABLE | 0.26% | 2026-06-24 |
| CVE-2026-39899 | 6.9 MEDIUM | PATCHED / FIX AVAILABLE | 0.39% | 2026-06-24 |
| CVE-2026-39897 | 5.3 MEDIUM | PATCHED / FIX AVAILABLE | 0.26% | 2026-06-24 |
| CVE-2026-39894 | 2.9 LOW | PATCHED / FIX AVAILABLE | 0.14% | 2026-06-24 |
| CVE-2026-39893 | 9.8 CRITICAL | PATCH UNDER REVIEW | 0.67% | 2026-06-24 |
| CVE-2025-45160 | ? N/A | PATCH UNDER REVIEW | 0.21% | 2026-01-29 |
| CVE-2025-66399 | 7.4 HIGH | PATCHED / FIX AVAILABLE | 10.81% | 2025-12-02 |
| CVE-2005-10004 PoC | 8.8 HIGH | PATCHED / FIX AVAILABLE | 1.95% | 2025-08-30 |
| CVE-2025-26520 | 7.6 HIGH | PATCHED / FIX AVAILABLE | 0.48% | 2025-02-12 |
Intel
Founded2001
CountryUnited States
LicenseOpen Source
Trust ScoreD — RISKY
Max CVSS10.0
Last Updated2026-08-03
Top Weaknesses
CWE-89
SQL Injection
13 occurrences in Cacti CVEs
(29% of total)
CWE-79
Cross-Site Scripting (XSS)
11 occurrences in Cacti CVEs
(24% of total)
CWE-22
Unknown Weakness Type
5 occurrences in Cacti CVEs
(11% of total)
CWE-78
Unknown Weakness Type
3 occurrences in Cacti CVEs
(7% of total)
CWE-94
Code Injection
2 occurrences in Cacti CVEs
(4% of total)
CWE-77
Unknown Weakness Type
2 occurrences in Cacti CVEs
(4% of total)
CWE-384
Unknown Weakness Type
1 occurrence in Cacti CVEs
(2% of total)
CWE-347
Unknown Weakness Type
1 occurrence in Cacti CVEs
(2% of total)
Company Profile
Cacti is an open-source network monitoring and graphing tool that uses RRDtool to store and visualize time-series data. It is widely used by network administrators to monitor bandwidth, CPU load, and other metrics, making it a critical component in many IT infrastructures. Its cybersecurity relevance stems from the need to secure Cacti installations against vulnerabilities that could expose sensitive network data or allow remote code execution.
Response Metrics
Est. MTTR ⓘ
~39 days
(Good)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +78% worse
CVE count 2026 vs 2025:
9 → 16 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€663K
Est. GDPR High
€6.6M
Based on 9 critical CVEs, 1 CISA KEV, 89% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Cacti D valtersit.com