CVE-2026-49442

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-49442", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-30T02:43:33.106Z", "datePublished": "2026-10-23T14:45:13.062Z", "dateUpdated": "2026-10-30T19:50:20.165Z"}, "containers": {"cna": {"title": "Cacti: User Enumeration via Error Messages", "problemTypes": [{"descriptions": [{"cweId": "CWE-204", "lang": "en", "description": "CWE-204: Observable Response Discrepancy", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7"}, {"name": "https://github.com/Cacti/cacti/pull/7166", "tags": ["x_refsource_MISC"], "url": "https://github.com/Cacti/cacti/pull/7166"}, {"name": "https://github.com/Cacti/cacti/commit/ab4baf338d65dcaafe1bd97d1e2a310fe0af0e3e", "tags": ["x_refsource_MISC"], "url": "https://github.com/Cacti/cacti/commit/ab4baf338d65dcaafe1bd97d1e2a310fe0af0e3e"}], "affected": [{"vendor": "Cacti", "product": "cacti", "versions": [{"version": "< 1.2.31", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-23T14:45:13.062Z"}, "descriptions": [{"lang": "en", "value": "Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on whether the provided username exists in the system. When username exists on Cacti, in the response, they see Access Denied! Login failed. When it does not exist on Cacti, they see Access Denied! Login Failed. The only difference between the responses is the capitalization of the letter \"f\" in the word failed. This issue has been patched in version 1.2.31."}], "source": {"advisory": "GHSA-m7v2-f3xw-3qh7", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T19:50:03.559456Z", "id": "CVE-2026-49442", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T19:50:20.165Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-49442", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-30T19:50:03.559456Z"}}}], "references": [{"url": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T19:49:45.559Z"}}], "cna": {"title": "Cacti: User Enumeration via Error Messages", "source": {"advisory": "GHSA-m7v2-f3xw-3qh7", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cacti", "product": "cacti", "versions": [{"status": "affected", "version": "< 1.2.31"}]}], "references": [{"url": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7", "name": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Cacti/cacti/pull/7166", "name": "https://github.com/Cacti/cacti/pull/7166", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/Cacti/cacti/commit/ab4baf338d65dcaafe1bd97d1e2a310fe0af0e3e", "name": "https://github.com/Cacti/cacti/commit/ab4baf338d65dcaafe1bd97d1e2a310fe0af0e3e", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on whether the provided username exists in the system. When username exists on Cacti, in the response, they see Access Denied! Login failed. When it does not exist on Cacti, they see Access Denied! Login Failed. The only difference between the responses is the capitalization of the letter \"f\" in the word failed. This issue has been patched in version 1.2.31."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-204", "description": "CWE-204: Observable Response Discrepancy"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-23T14:45:13.062Z"}}}, "cveMetadata": {"cveId": "CVE-2026-49442", "state": "PUBLISHED", "dateUpdated": "2026-10-30T19:50:20.165Z", "dateReserved": "2026-05-30T02:43:33.106Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-10-23T14:45:13.062Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "cacti", "vendor": "Cacti", "versions": [{"status": "affected", "version": "< 1.2.31"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on whether the provided username exists in the system. When username exists on Cacti, in the response, they see Access Denied! Login failed. When it does not exist on Cacti, they see Access Denied! Login Failed. The only difference between the responses is the capitalization of the letter \"f\" in the word failed. This issue has been patched in version 1.2.31."}], "id": "CVE-2026-49442", "lastModified": "2026-10-30T20:17:09.563", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-49442", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T19:50:03.559456Z", "version": "2.0.3"}}]}, "published": "2026-10-23T15:17:32.003", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/Cacti/cacti/commit/ab4baf338d65dcaafe1bd97d1e2a310fe0af0e3e"}, {"source": "security-advisories@github.com", "url": "https://github.com/Cacti/cacti/pull/7166"}, {"source": "security-advisories@github.com", "url": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-204"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "cacti: cacti: User enumeration via discrepant login error messages", "id": "2559921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559921"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-204", "details": ["Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on whether the provided username exists in the system. When username exists on Cacti, in the response, they see Access Denied! Login failed. When it does not exist on Cacti, they see Access Denied! Login Failed. The only difference between the responses is the capitalization of the letter \"f\" in the word failed. This issue has been patched in version 1.2.31.", "A flaw was found in Cacti. This vulnerability allows an unauthenticated remote attacker to perform user enumeration by observing subtle discrepancies in login failure responses. Because the application returns slightly different error messages depending on whether a submitted username exists in the system, an attacker can identify valid user accounts to facilitate targeted attacks."], "name": "CVE-2026-49442", "public_date": "2026-10-23T14:45:13Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-49442\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-49442\nhttps://github.com/Cacti/cacti/commit/ab4baf338d65dcaafe1bd97d1e2a310fe0af0e3e\nhttps://github.com/Cacti/cacti/pull/7166\nhttps://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7"], "statement": "Red Hat Product Security has rated this vulnerability as having a Moderate impact because an unauthenticated remote attacker can distinguish valid usernames from invalid ones based on response text differences, enabling username harvesting that aids subsequent brute-force attacks. While remotely exploitable without privileges, the flaw does not disclose sensitive credentials, compromise system integrity, or provide unauthorized administrative access on its own. In typical enterprise Red Hat deployments, Cacti is hosted on internal networks for administrative monitoring rather than exposed to untrusted public environments, which reduces the overall risk of remote exposure.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.2.31)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "cacti", "source": "cna", "vendor": "Cacti"}, "product": "cacti", "vendor": "cacti"}], "created": "2026-10-23T17:30:17.170214+00:00", "updated": "2026-10-23T23:00:13.056855+00:00", "vendors": ["cacti", "cacti$PRODUCT$cacti"]}