CVE-2026-40083

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in managers.php. At line 756 of managers.php, the application assigns $selected_items by calling cacti_unserialize(stripslashes(gnrv('selected_graphs_array'))). The cacti_unserialize() function calls unserialize() with allowed_classes set to false, which prevents object injection but still allows arbitrary string arrays to be deserialized. Then, at lines 760 to 766, the deserialized array values are passed directly into db_execute('DELETE FROM snmpagent_managers WHERE id IN (' . implode(',', $selected_items) . ')'), where they are imploded into the SQL statement without any integer validation, resulting in SQL Injection when using SNMP agent management permissions. This issue has been fixed in version 1.2.31.

• CWE-89

• https://github.com/Cacti/cacti/releases/tag/release%2F1.2.31Product, Release Notes
• https://github.com/Cacti/cacti/security/advisories/GHSA-j9jv-6xjq-9hhjExploit, Mitigation, Vendor Advisory
• https://github.com/Cacti/cacti/security/advisories/GHSA-j9jv-6xjq-9hhjExploit, Mitigation, Vendor Advisory

Published

Jun 25, 2026

Last Modified

Jun 30, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40076OpenMRS Core is an open source electronic medical record sys…8.8
• CVE-2026-40077Beszel is a server monitoring platform. Prior to 0.18.7, som…3.1
• CVE-2026-40079Cacti is an open source performance and fault management fra…9.8
• CVE-2026-4008A flaw has been found in Tenda W3 1.0.0.3(2204). This issue …8.8
• CVE-2026-40080Cacti is an open source performance and fault management fra…6.1
• CVE-2026-40082Cacti is an open source performance and fault management fra…5.4
• CVE-2026-40084Cacti is an open source performance and fault management fra…6.5
• CVE-2026-40086Rembg is a tool to remove images background. Prior to 2.0.75…5.3
• CVE-2026-40087LangChain is a framework for building agents and LLM-powered…5.3
• CVE-2026-40088PraisonAI is a multi-agent teams system. Prior to 4.5.121, t…9.6
• CVE-2026-40089Sonicverse is a Self-hosted Docker Compose stack for live ra…9.9
• CVE-2026-4009A vulnerability has been found in jarikomppa soloud up to 20…3.3