VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 24, 2026· Updated Jun 25, 2026

CVE-2026-39900

CVE-2026-39900

Description

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the auth_profile.php JavaScript context. This issue has been fixed in version 1.2.31.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Cacti (software)/Cacti2 versions
    cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*range: <1.2.31
    • (no CPE)range: <=1.2.30

Patches

Vulnerability mechanics

References

2

News mentions

1