CVE-2007-3112: The Cacti Group Cacti

High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days.

graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.

Affected products

• The Cacti Group Cacti: up to and including 0.8.6i

Published 2007-06-07. Last modified 2026-06-16.