Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-7058

No fix known EPSS 2%

data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.

Published 2020-01-15 · CVE record · OSV

Products: cacti

Distro releases

ReleasePackageFixed in
Debian 12cactino fix
Debian 13cactino fix
Debian 14cactino fix