VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 25, 2026· Updated Jun 29, 2026

CVE-2026-40941

CVE-2026-40941

Description

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed packages. This issue has been fixed in version 1.2.31.

Affected products

2
  • Cacti (software)/Cacti2 versions
    cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*range: <1.2.31
    • (no CPE)range: <=1.2.30

Patches

Vulnerability mechanics

References

3

News mentions

1