Exploit for Incorrect Authorization in Cacti

githubexploit · 2025-01-04

Description

Exploit for unauthenticated command injection vulnerability in Cacti version 1.2.22.

Affected Cacti versions

Cacti< 1.2.23

All known vulnerabilities by product

Alt Linux Cacti Linuxmint Ubuntu

CVSS 9.8 for CVE-2022-46169

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.8%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-01-06 11:49

Last Seen:2025-08-31 22:25

Reporter:lof1sec

Written in:Python

Last commit:2025-01-06

Tags

cacti command injection vulnerability cve-2022-46169 exploit

Other exploits for CVE-2022-46169

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2022-46169_unauth_remote_code_execution

2026-08-28 KitPloitKITPLOIT

CVE-2022-46169_POC

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2022-46169-CACTI-1.2.22

2026-08-28 KitPloitKITPLOIT

Exploit Code

README4 lines

## https://sploitus.com/exploit?id=3369E8C8-F457-5C4D-8E85-5761ED70061C
# Cacti v1.2.22: Unauthenticated Command Injection Vulnerability (CVE-2022-46169)

Based on ariyaadinatha PoC exploit for CVE-2022-46169