CVE-2009-4112: Cacti

High severity, CVSS 9.0. EPSS: 11.5% chance of exploitation in the next 30 days.

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands.

Affected products

• Cacti Cacti: up to and including 0.8.7e; version 0.6.7 only; version 0.8 only; version 0.8.1 only; version 0.8.2 only; version 0.8.2a only; …

Published 2009-11-30. Last modified 2026-06-16.