---
id: CVE-2005-10004
title: >-
  Cacti versions prior to 0.8.6-d contain a remote command execution
  vulnerability in the graph_view.php script
summary: >-
  Cacti versions prior to 0.8.6-d contain a remote command execution
  vulnerability in the graph_view.php script. An authenticated user can inject
  arbitrary shell commands via the graph_start GET parameter, which is
  improperly handled durin…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-78
vendor: cacti
product: cacti
affected:
  - cacti < 0.8.6d
patched:
  - cacti 0.8.6d
published: '2025-08-30'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T13:10:00.153'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2005-10004'
references:
  - url: >-
      https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/cacti_graphimage_exec.rb
    label: disclosure@vulncheck.com
  - url: >-
      https://web.archive.org/web/20050305034552/http://www.cacti.net/cactid_download.php
    label: disclosure@vulncheck.com
  - url: 'https://www.cacti.net/info/downloads'
    label: disclosure@vulncheck.com
  - url: 'https://www.exploit-db.com/exploits/16881'
    label: disclosure@vulncheck.com
  - url: 'https://www.exploit-db.com/exploits/9911'
    label: disclosure@vulncheck.com
  - url: 'https://www.vulncheck.com/advisories/cacti-graph-view-rce'
    label: disclosure@vulncheck.com
tags:
  - nvd
  - exploit-available
epss: 0.01952
epssPercentile: 0.79395
exploits:
  metasploit:
    - exploit/unix/webapp/cacti_graphimage_exec
  checkedAt: '2026-09-26T09:05:32.119Z'
exploitAvailable: true
ingestedAt: '2026-09-23T13:24:43.388Z'
---

## Overview

Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity.

## Affected

- `cacti < 0.8.6d`

## Remediation

Upgrade past the affected range:

- `cacti 0.8.6d`