CVE-2010-1645: Cacti

Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in (1) the FQDN field of a Device or (2) the Vertical Label field of a Graph Template.

Affected products

• Cacti Cacti: up to and including 0.8.7e; version 0.5 only; version 0.6 only; version 0.6.1 only; version 0.6.2 only; version 0.6.3 only; …

Published 2010-08-23. Last modified 2026-06-16.