CVE-2021-40643: EyesOfNetwork

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page (by default/usr/sbin/sendmail) it is possible to execute any command, which will be executed when we make a test of the configuration ("send test mail").

Affected products

• EyesOfNetwork EyesOfNetwork: before 2021-07-07 (fixed in 2021-07-07)

Published 2022-06-30. Last modified 2026-06-17.