CVE-2026-46531
Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)
CVSS score
5.5
EPSS probability
—
Risk score
0.6
Published
4 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2022-46169 Actively exploitedcacti: unauthenticated command injection
Workaround Public Exploits:17EPSS %100
8.8
CVE-2025-66399Command injection in Cacti
Patch status unknown Public Exploits:1EPSS %11
7.2
CVE-2026-39902Cacti: Authenticated RCE on Data Input
Patch status unknown Public Exploits:1
5.3
CVE-2026-49442Cacti: User Enumeration via Error Messages
Patch status unknown
8.8
CVE-2005-10004OS command injection in Cacti
Patch status unknown Public Exploits:4EPSS %3
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-46531"