VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 24, 2026· Updated Jun 25, 2026

CVE-2026-39897

CVE-2026-39897

Description

Cacti is an open source performance and fault management framework. Versions 1.2.30 and below contain a Reflected XSS vulnerability in the html_auth_footer. This issue has been fixed in version 1.2.31.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Cacti (software)/Cacti2 versions
    cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*range: <1.2.31
    • (no CPE)range: <=1.2.30

Patches

Vulnerability mechanics

References

2

News mentions

1