Cacti issues fix for critical preauth SQLi and file inclusion flaw

**Critical Alert: Cacti Vulnerabilities Summary**

• **Product:** Cacti
• **Number of Vulnerabilities:** 4 (including CVE-2026-39893, CVE-2026-39948, CVE-2026-39955, CVE-2026-39938)
• **Severity Rating:** High (9.3 to 9.8, Critical)
• **Key Issues:**

1. Pre-authentication SQL injection vulnerabilities allowing database access without credentials.

2. Unauthenticated local file inclusion vulnerability.

• **Impact:** These vulnerabilities could allow external attackers to read sensitive data or alter database contents.
• **Fix Available:** Update to Cacti version 1.2.31 to mitigate issues.
• **Current Exploitation Status:** No confirmed exploitation reported.
• **Mitigation Recommendations:** Disable guest graph viewing, restrict console access, and patch immediately.