CVE-2017-16661: Cacti

Medium severity, CVSS 4.9. EPSS: 1.5% chance of exploitation in the next 30 days.

Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd (with a Log Path under /etc) to read /etc/passwd.

Affected products

• Cacti Cacti: version 1.1.27 only

Published 2017-11-08. Last modified 2026-06-17.