CVE-2014-4000

HIGH 8.8CVE-2014-4000 · Published 15/11/2017 · updated 17/06/2026

In short

CVE-2014-4000 is a HIGH (CVSS 8.8) vulnerability affecting cacti (cacti).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.8% of all vulnerabilities.
Fix: update to 1.0.0 or later.

Package	Affected versions	Patched versions
cacti cacti	`< 1.0.0`	`1.0.0`

Description

Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).

References

forums.cacti.net/viewtopic.php · Issue Tracking
security-tracker.debian.org/tracker/CVE-2014-4000 · Issue Tracking
security.gentoo.org/glsa/201711-10 · Issue Tracking
cacti.net/release_notes_1_0_0.php · Issue Tracking

More vulnerabilities in cacti

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cacti

< 1.0.0

1.0.0

More vulnerabilities in cacti

See all →