Cacti is a technology platform tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed December 5, 2025; most recent activity January 31, 2026.
Cacti is a PHP-based network monitoring and graphing platform that collects metrics from devices and renders dashboards for admins. Recent reports describe a command-injection vulnerability that enables remote code execution on affected installations, giving attackers the ability to run arbitrary commands on the Cacti server. This RCE risk is significant because compromised monitoring infrastructure can lead to broader network access and data exposure.
Metasploit has released seven new exploit modules targeting vulnerabilities in FreePBX, Cacti, and SmarterMail. The update includes critical remote code execution capabilities for Cacti and SmarterMail, enhancing tools…
A command injection vulnerability in Cacti allows attackers to execute malicious code remotely. This flaw affects users of the Cacti network monitoring tool, potentially compromising their systems. Security patches are…