Back to the CVE list
CVE-2022-46169 CISA KEV · Actively exploited

cacti: unauthenticated command injection

CVSS score

9.8

EPSS probability

%99.8

Risk score

19.6

Published

3 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22 (★8)

Public PoCSource updated: 06.01.2023 15:18:35

Cacti Unauthenticated Command Injection (★2)

Public PoCSource updated: 03.01.2023 19:29:20

This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer. (★2)

Public PoCSource updated: 02.05.2023 07:54:36

CVE-2022-46169 Cacti remote_agent.php Unauthenticated Command Injection. (★1)

Public PoCSource updated: 13.12.2022 15:16:32

RCE POC for CVE-2022-46169 (★1)

Public PoCSource updated: 16.01.2023 20:33:15

This is poc of CVE-2022-46169 authentication bypass and remote code execution (★1)

Public PoCSource updated: 13.03.2023 15:30:41

Repo for CVE-2022-46169 (★1)

Public PoCSource updated: 21.03.2023 08:57:27

CVE-2022-46169 (★0)

Public PoCSource updated: 28.03.2023 15:17:46

CVE-2022-46169 - Cacti Blind Remote Code Execution (Pre-Auth) (★0)

Public PoCSource updated: 17.12.2022 01:18:29

Exploit to CVE-2022-46169 vulnerability (★0)

Public PoCSource updated: 13.01.2023 14:42:13

Cacti: Unauthenticated Remote Code Execution Exploit in Ruby (★0)

Public PoCSource updated: 16.01.2023 15:54:11

WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2022-46169). Run it at your own risk! (★0)

Public PoCSource updated: 03.04.2023 23:44:50

Unauthenticated Remote Code Execution through authentication bypass and command injection in Cacti < 1.2.23 and < 1.3.0 (★0)

Public PoCSource updated: 08.04.2023 08:44:02

Unauthenticated Remote Code Execution through authentication bypass and command injection in Cacti < 1.2.23 and < 1.3.0 (★0)

Public PoCSource updated: 11.04.2023 17:16:52

Fixed exploit for CVE-2022-46169 (originally from https://www.exploit-db.com/exploits/51166) (★0)

Public PoCSource updated: 13.04.2023 17:55:55

Cacti v1.2.22 - Remote Command Execution (RCE)

Exploit referenceSource updated: 31.03.2023 00:00:00

Nuclei: Cacti <=1.2.22 - Remote Command Injection

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-46169"