[Git][security-tracker-team/security-tracker][master] Add new cacti issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
48021dd7 by Salvatore Bonaccorso at 2026-06-26T09:27:31+02:00
Add new cacti issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -83,17 +83,29 @@ CVE-2026-44622 (Charging station authentication identifiers are publicly accessi
 CVE-2026-43920 (FOSSBilling is a free, open-source billing and client management syste ...)
 	TODO: check
 CVE-2026-40941 (Cacti is an open source performance and fault management framework. Ve ...)
-	TODO: check
+	- cacti <unfixed>
+	NOTE: https://github.com/Cacti/cacti/security/advisories/GHSA-274c-97hj-pv2v
+	NOTE: https://github.com/Cacti/cacti/pull/7054
+	NOTE: https://github.com/Cacti/cacti/commit/891344a5c10b8687a3d2a5d26e6de20f13069e2a (release/1.2.31)
 CVE-2026-40702 (WebSocket endpoints lack proper authentication mechanisms, enabling at ...)
 	TODO: check
 CVE-2026-40084 (Cacti is an open source performance and fault management framework. Ve ...)
-	TODO: check
+	- cacti <unfixed>
+	NOTE: https://github.com/Cacti/cacti/security/advisories/GHSA-mjvw-mhj5-9jcj
+	NOTE: Fixed by: https://github.com/Cacti/cacti/commit/4c09efaebf3a9faec66969d0b5c4aceaf397f37f (release/1.2.31)
 CVE-2026-40083 (Cacti is an open source performance and fault management framework. Ve ...)
-	TODO: check
+	- cacti <unfixed>
+	NOTE: https://github.com/Cacti/cacti/security/advisories/GHSA-j9jv-6xjq-9hhj
+	NOTE: Fixed by: https://github.com/Cacti/cacti/commit/891344a5c10b8687a3d2a5d26e6de20f13069e2a (release/1.2.31)
 CVE-2026-40082 (Cacti is an open source performance and fault management framework. Ve ...)
-	TODO: check
+	- cacti <unfixed>
+	NOTE: https://github.com/Cacti/cacti/security/advisories/GHSA-273r-qr93-wgcp
+	NOTE: Fixed by: https://github.com/Cacti/cacti/commit/2fa404e70a5702be10682555911228e8e51ba198 (release/1.2.31)
 CVE-2026-40080 (Cacti is an open source performance and fault management framework. Ve ...)
-	TODO: check
+	- cacti <unfixed>
+	NOTE: https://github.com/Cacti/cacti/security/advisories/GHSA-6gr7-53g8-vchq
+	NOTE: https://github.com/Cacti/cacti/pull/7039
+	NOTE: Fixed by: https://github.com/Cacti/cacti/commit/4c09efaebf3a9faec66969d0b5c4aceaf397f37f (release/1.2.31)
 CVE-2026-38640 (A reachable unwrap in the __assert_fail function (/assert/mod.rs) of r ...)
 	TODO: check
 CVE-2026-38637 (An issue in the pthread_rwlockattr_setpshared() function of relibc com ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48021dd71fba01e7992b8bca920b7cb55af16ecd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48021dd71fba01e7992b8bca920b7cb55af16ecd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260626/8047329a/attachment-0001.htm>