What it is
Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf
- nvd.nist.gov/vuln/detail/CVE-2022-46169
Description and required action as published by CISA. Full record at NVD.