[EN] CVE-2026-40083: SQL Injection in Cacti

CVE

CVE-2026-40083

Published

2026-08-27 20:01

Collected

2026-10-17 01:31

---
id: 9155
title: "[EN] CVE-2026-40083: SQL Injection in Cacti"
cve: CVE-2026-40083
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/en-cve-2026-40083-sql-injection-in-cacti/"
published_at: "2026-08-27T20:01:06Z"
tags: ["vulnerability-research", "sql-injection", "research"]
phying_url: "https://phying.com/item/9155"
lang: en
---

# [EN] CVE-2026-40083: SQL Injection in Cacti

## Summary

Summary The Yokai research team, from Hakai Security, identified a SQL Injection vulnerability in Cacti versions <= 1.2.30. The flaw allows an authenticated user with SNMP management permissions to execute arbitrary SQL queries, enabling the reading or modification of the entire database content. The vulnerability resides in the managers.php file, where user input is inserted […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2026-40083
- **Published:** 2026-08-27T20:01:06Z
- **Original:** https://yokai.hakaisecurity.io/en-cve-2026-40083-sql-injection-in-cacti/
- **Phying News:** https://phying.com/item/9155