Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-66399

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters (including newlines) that are accepted, stored verbatim in the database, and later embedded into backend SNMP operations. In environments where downstream SNMP tooling or wrappers interpret newline-separated tokens as command boundar
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:47ba61ffc6fb9d25a4d6187d1add51902298cb6f764f5252770b235609f13ba4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"cacti","vendor":"Cacti","versions":[{"status":"affected","version":"< 1.2.29"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0e19594d26120939e774580a75317714a9cd99257f18161b6edff03e79e6bcf7 · sha256:5f6caa5b17c09291… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":7.4,"baseSeverity":"HIGH","privilegesRequired":"LOW","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:0e19594d26120939e774580a75317714a9cd99257f18161b6edff03e79e6bcf7 · sha256:5f6caa5b17c09291… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-77","description":"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:0e19594d26120939e774580a75317714a9cd99257f18161b6edff03e79e6bcf7 · sha256:5f6caa5b17c09291… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"name":"https://github.com/Cacti/cacti/security/advisories/GHSA-c7rr-2h93-7gjf","tags":["x_refsource_CONFIRM"],"url":"https://github.com/Cacti/cacti/security/advisories/GHSA-c7rr-2h93-7gjf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e19594d26120939e774580a75317714a9cd99257f18161b6edff03e79e6bcf7 · sha256:5f6caa5b17c09291… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer