What is the CVSS score of CVE-2025-66399?

CVE-2025-66399 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Ubuntu are affected by CVE-2025-66399?

Cacti installations are vulnerable to authenticated command injection through malicious SNMP configuration strings, potentially allowing attackers with user-level access to execute arbitrary commands…. A patch is available.

Is there a public PoC exploit available for CVE-2025-66399?

Yes, a public proof-of-concept exploit is available for CVE-2025-66399. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2025-66399?

Within 24 hours: Identify all Cacti deployments and document versions; restrict SNMP configuration access to trusted administrators only; review recent SNMP device configuration changes for suspicious entries. Within 7 days: Contact Cacti vendor for patch availability timeline; implement network segmentation to limit Cacti process privileges and outbound command execution; enable comprehensive logging of SNMP operations. Within 30 days: Apply vendor patch immediately upon release; conduct audit of all SNMP device configurations for control characters; perform privilege review and consider running Cacti under minimal-privilege service accounts.

Ubuntu CVE-2025-66399

EUVD-2025-200287 HIGH

Command Injection (CWE-77)

2025-12-02 security-advisories@github.com

Command Injection Ubuntu Debian Cacti Suse

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ubuntu

MEDIUM

qualitative

SUSE

HIGH

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 14:04 euvd

EUVD-2025-200287

Analysis Generated

Mar 15, 2026 - 14:04 vuln.today

PoC Detected

Dec 05, 2025 - 18:57 vuln.today

Public exploit code

CVE Published

Dec 02, 2025 - 18:15 nvd

HIGH 8.8

DescriptionGitHub Advisory

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters (including newlines) that are accepted, stored verbatim in the database, and later embedded into backend SNMP operations. In environments where downstream SNMP tooling or wrappers interpret newline-separated tokens as command boundaries, this can lead to unintended command execution with the privileges of the Cacti process. This vulnerability is fixed in 1.2.29.

Analysis

Technical ContextAI

Command injection allows an attacker to execute arbitrary OS commands on the host system through a vulnerable application that passes user input to system shells.

RemediationAI

Avoid passing user input to system commands. Use language-specific APIs instead of shell commands. If unavoidable, use strict input validation and escaping.

More in Cacti

View all

CVE-2025-24367 HIGH Act Now POC

8.7 Jan 27

Cacti monitoring platform prior to version 1.2.29 allows authenticated users to achieve remote code execution through th

CVE-2022-46169 CRITICAL Act Now POC

9.8 Dec 05

Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management fram

CVE-2023-49085 HIGH Act Now POC

8.8 Dec 22

Cacti provides an operational monitoring and fault management framework. Rated high severity (CVSS 8.8), this vulnerabil

CVE-2023-49084 HIGH Act Now POC

8.8 Dec 21

Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB).

CVE-2020-14295 HIGH Act Now POC

7.2 Jun 17

A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. Rated high se

CVE-2023-39361 CRITICAL Act Now POC

9.8 Sep 05

Cacti is an open source operational monitoring and fault management framework. Rated critical severity (CVSS 9.8), this

CVE-2017-1000031 HIGH This Week POC

8.8 Jul 17

SQL injection vulnerability in graph_templates_inputs.php in Cacti 0.8.8b allows remote attackers to execute arbitrary S

CVE-2015-8604 HIGH This Week POC

8.8 Apr 11

SQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier allows remote

CVE-2016-3659 HIGH This Week POC

8.8 Apr 11

SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQ

CVE-2016-3172 HIGH This Week POC

8.8 Apr 12

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitra

CVE-2023-51448 HIGH This Week POC

8.8 Dec 22

Cacti provides an operational monitoring and fault management framework. Rated high severity (CVSS 8.8), this vulnerabil

CVE-2023-39358 HIGH This Week POC

8.8 Sep 05

Cacti is an open source operational monitoring and fault management framework. Rated high severity (CVSS 8.8), this vuln

Same weakness CWE-77 – Command Injection

View all

CVE-2024-21887 CRITICAL POC

9.1

CVE-2012-1823 CRITICAL POC

9.8

CVE-2016-1555 CRITICAL POC

9.8

CVE-2015-2051 HIGH POC

8.8

CVE-2017-6327 HIGH POC

8.8

CVE-2023-34960 CRITICAL POC

9.8

CVE-2023-37679 CRITICAL POC

9.8

CVE-2025-10035 CRITICAL POC

10.0

Same technique Command Injection

View all

CVE-2012-1823 CRITICAL POC

9.8

CVE-2016-1555 CRITICAL POC

9.8

CVE-2014-6271 CRITICAL POC

9.8

CVE-2015-2051 HIGH POC

8.8

CVE-2014-6278 HIGH POC

8.8

CVE-2017-6334 HIGH POC

8.8

CVE-2024-50603 CRITICAL POC

10.0

CVE-2025-64328 HIGH POC

8.6

Vendor StatusVendor

Ubuntu

Priority: Medium

cacti

Release	Status	Version
noble	needs-triage	-
plucky	ignored	end of life, was needs-triage
questing	not-affected	1.2.30+ds1-1ubuntu1
upstream	released	1.2.30+ds1-1
trusty	needs-triage	-
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-

Debian

cacti

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	1.2.16+ds1-2+deb11u3	-
bullseye (security)	vulnerable	1.2.16+ds1-2+deb11u5	-
bookworm, bookworm (security)	vulnerable	1.2.24+ds1-1+deb12u5	-
forky, trixie	fixed	1.2.30+ds1-1	-
sid	fixed	1.2.30+ds1-2	-
(unstable)	fixed	1.2.30+ds1-1	-

SUSE

Severity: High

CVE-2025-66399 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-66399

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

Analysis

Technical ContextAI

RemediationAI

More in Cacti

Same weakness CWE-77 – Command Injection

Same technique Command Injection

Vendor StatusVendor

Ubuntu

Debian

SUSE

Share

External POC / Exploit Code