CVE-2020-23226: Cacti

Medium severity, CVSS 6.1. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, (6) reports_admin.php, and (7) data_input.php.

Affected products

• Cacti Cacti: version 1.2.12 only
• Debian Debian Linux: version 9.0 only; version 10.0 only

Published 2021-08-27. Last modified 2026-06-17.