CVE-2004-1736: The Cacti Group Cacti

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.

Affected products

Published 2004-12-31. Last modified 2026-06-16.