Cacti, an open-source framework for network monitoring and fault management, has a critical security flaw that could allow an attacker to execute code remotely on vulnerable instances.
The flaw is tracked as CVE-2022-26204 and has a CVSS rating of 9.1 out a maximum score of 10.
“Authenticated users can inject malware due to a bug in the multi-line SNMP results parser.”