High severity7.2NVD Advisory· Published Nov 8, 2017· Updated May 13, 2026
CVE-2017-16660
CVE-2017-16660
Description
Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.
Affected products
1- cpe:2.3:a:cacti:cacti:1.1.27:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/Cacti/cacti/issues/1066nvdExploitIssue TrackingPatch
News mentions
0No linked articles in our index yet.