CVE-2022-46169
Cacti Command Injection Vulnerability
CVSS
—
No CVSS
EPSS
99.8%
p100
KEV
YES
Feb 16, 2023
Exploit Today
80
0-100
Published: — · Last modified: —
99.8%EPSS · 30 days99.8%
2026-06-302026-07-16
Product
Cacti / Cacti
Vulnerability
Cacti Command Injection Vulnerability
Added to KEV
Feb 16, 2023
Remediate by
Mar 9, 2023
Known ransomware use
No
Summary description
Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.
Required action
Apply updates per vendor instructions.
Notes
https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf; https://nvd.nist.gov/vuln/detail/CVE-2022-46169
No related CVEs by CWE or product.