8.8

CVE-2005-10004: Cacti graph_view.php RCE via graph_start Parameter Injection

Analyzed
AliasesUBUNTU-CVE-2005-10004DEBIAN-CVE-2005-10004
Published 30-08-2025Last modified 28-07-2026

Vulnerability summary

CVE-2005-10004 is a high (CVSS 8.8) vulnerability in cacti. EPSS estimates a 2.81% chance of exploitation in the next 30 days, higher than 86.5% of scored vulnerabilities. 5 public exploits are recorded.

Priority
Prioritiseweaponized exploit

Weaponized exploit (Metasploit, 15-01-2005)

Source freshness unavailable

How is this decided?
CVSS score
8.8/10
010
High · v3.1 (NVD)
EPSS score
2.81%
0%100%
Low · +0.86 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits5exploit-database, reference, metasploit

Timeline

  1. 30-08-2025
    PublishedVulnerability first disclosed.
  2. 28-07-2026
    Last modifiedVulnerability information updated.

Description

Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

2.81%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

Increase +0.86 pp

From 1.95% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

5 found
  • exploit-databasephpVerified

    Cacti 0.8.6-d - 'graph_view.php' Command Injection (Metasploit)

    Maturity: poc

  • exploit-databasephpVerified

    Cacti - 'graph_view.php' Remote Command Execution (Metasploit)

    Maturity: poc

  • referenceUnverified

    Exploit Reference (raw.githubusercontent.com)

    Maturity: unknown

Show all 5 exploits
  • referenceUnverified

    Exploit Reference (vulncheck.com)

    Maturity: unknown

  • MetasploitMetasploitremoteVerified

    Cacti graph_view.php Remote Command Execution

    exploit/unix/webapp/cacti_graphimage_exec

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Cacti1 product
Debian1 product
  • cacti< 0.8.6d-1
Raxnet/ian berry1 product
Ubuntu1 product
  • cactiAll versions (No fix recorded)

4 vendors · 4 products

References

9 links