Skip to content

CVE-2022-46169

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 13, 2026
Last Seen
November 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Cacti Exploited72.6

CVE-2022-46169 is a critical vulnerability in Cacti versions ≤ 1.2.22, allowing unauthenticated remote code execution. Attackers can exploit this flaw by sending a specially crafted HTTP request to the `remote_agent.php` file, bypassing authentication through a forged `X-Forwarded-For` header. The v...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-78 - OS Command InjectionCWE-287 - Improper AuthenticationT1059 - Command and Scripting Interpreter