{"id":"CVE-2024-27082","aliases":["ALPINE-CVE-2024-27082","DEBIAN-CVE-2024-27082","DSA-5862-1","EUVD-2024-24343","GHSA-j868-7vjp-rp9h","UBUNTU-CVE-2024-27082","openSUSE-SU-2024:0274-1","openSUSE-SU-2024:0276-1","openSUSE-SU-2024:13962-1"],"status":"published","title":"Cacti Cross-site Scripting vulnerability when managing trees","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00921,"percentile":0.60782,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2024-05-13T13:49:10Z","modified":"2026-11-03T06:32:45Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"cacti","fixed_in":["1.2.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cacti","fixed_in":["1.2.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cacti","fixed_in":["1.2.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cacti","fixed_in":["1.2.29-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cacti","fixed_in":["1.2.24+ds1-1+deb12u5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["1.2.27+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["1.2.27+ds1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.29-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24+ds1-1+deb12u5"}]}],"versions":["1.2.24+ds1-1","1.2.24+ds1-1+deb12u1","1.2.24+ds1-1+deb12u2","1.2.24+ds1-1+deb12u3","1.2.24+ds1-1+deb12u4"]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24+ds1-1+deb12u5"}]}],"versions":["1.2.24+ds1-1","1.2.24+ds1-1+deb12u1","1.2.24+ds1-1+deb12u2","1.2.24+ds1-1+deb12u3","1.2.24+ds1-1+deb12u4"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8b+dfsg-3","0.8.8b+dfsg-5","0.8.8b+dfsg-5ubuntu0.1","0.8.8b+dfsg-5ubuntu0.2","0.8.8b+dfsg-5ubuntu0.2+esm1","0.8.8b+dfsg-5ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8f+ds1-2","0.8.8f+ds1-3","0.8.8f+ds1-4","0.8.8f+ds1-4ubuntu1","0.8.8f+ds1-4ubuntu2","0.8.8f+ds1-4ubuntu3","0.8.8f+ds1-4ubuntu4","0.8.8f+ds1-4ubuntu4.16.04","0.8.8f+ds1-4ubuntu4.16.04.1","0.8.8f+ds1-4ubuntu4.16.04.2","0.8.8f+ds1-4ubuntu4.16.04.2+esm1","0.8.8f+ds1-4ubuntu4.16.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.18+ds1-1","1.1.27+ds1-2","1.1.27+ds1-3","1.1.28+ds1-2","1.1.35+ds1-1","1.1.36+ds1-1","1.1.38+ds1-1","1.1.38+ds1-1ubuntu0.1~esm1","1.1.38+ds1-1ubuntu0.1~esm3","1.1.38+ds1-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.4+ds1-2ubuntu3","1.2.9+ds1-1ubuntu1","1.2.9+ds1-1ubuntu2","1.2.10+ds1-1ubuntu1","1.2.10+ds1-1ubuntu1+esm1","1.2.10+ds1-1ubuntu1.1","1.2.10+ds1-1ubuntu1.1+esm1","1.2.10+ds1-1ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.16+ds1-2ubuntu1","1.2.19+ds1-2ubuntu1","1.2.19+ds1-2ubuntu1+esm1","1.2.19+ds1-2ubuntu1.1","1.2.19+ds1-2ubuntu1.1+esm1","1.2.19+ds1-2ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.25+ds1-2","1.2.26+ds1-1","1.2.26+ds1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.28+ds1-4ubuntu1","1.2.30+ds1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.30+ds1-1ubuntu2","1.2.30+ds1-1ubuntu3","1.2.31+ds1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.30+ds1-1ubuntu1","1.2.30+ds1-1ubuntu2"]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp155.2.9.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp155.2.9.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp155.2.9.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp155.2.9.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp155.2.9.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp155.2.9.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp156.2.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp156.2.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp156.2.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cacti-spine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-bp156.2.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.27-1.1"}]}],"bundled":10}],"products":[{"vendor":"cacti","product":"cacti"}],"references":[{"url":"https://github.com/Cacti/cacti/security/advisories/GHSA-j868-7vjp-rp9h","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","advisory","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-27082","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27082.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27082","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-27082","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-27082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27082","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RAIZKHB2VPK6KRYTE3TU44EJVFAT4WWP/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224229","tags":["report"]},{"url":"https://bugzilla.suse.com/1224230","tags":["report"]},{"url":"https://bugzilla.suse.com/1224231","tags":["report"]},{"url":"https://bugzilla.suse.com/1224235","tags":["report"]},{"url":"https://bugzilla.suse.com/1224236","tags":["report"]},{"url":"https://bugzilla.suse.com/1224237","tags":["report"]},{"url":"https://bugzilla.suse.com/1224238","tags":["report"]},{"url":"https://bugzilla.suse.com/1224239","tags":["report"]},{"url":"https://bugzilla.suse.com/1224240","tags":["report"]},{"url":"https://bugzilla.suse.com/1224241","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34340","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAAOBG657QTBRHKB55GHL2C7553NKG67/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-27082","title":"Cacti Cross-site Scripting vulnerability when managing trees","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","status":"published","published":"2024-05-13T13:49:10.484Z","modified":"2024-08-02T00:27:57.834Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:12.982241Z"}],"euvd":[{"id":"EUVD-2024-24343","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","status":"published","published":"2024-05-13T13:49:10Z","modified":"2024-08-02T00:27:57Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:27.194572Z"}],"nvd":[{"id":"CVE-2024-27082","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","status":"published","published":"2024-05-14T15:11:27.02Z","modified":"2026-06-17T07:19:07.803Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:57.497105Z"}],"osv":[{"id":"ALPINE-CVE-2024-27082","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","status":"published","published":"2024-05-14T15:11:27.02Z","modified":"2026-11-03T06:32:45.453007684Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"CVE-2024-27082","title":"Cacti Cross-site Scripting vulnerability when managing trees","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","status":"published","published":"2024-05-13T13:49:10.484Z","modified":"2026-10-28T02:30:33.274616112Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:44:39.569658Z"},{"id":"DEBIAN-CVE-2024-27082","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","status":"published","published":"2024-05-14T15:11:27.02Z","modified":"2026-11-02T12:01:28.464204648Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:42.204259Z"},{"id":"UBUNTU-CVE-2024-27082","description":"Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular page. Version 1.2.27 contains a patch for the issue.","status":"published","published":"2024-05-14T15:11:00Z","modified":"2026-10-17T12:56:44.122777721Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H","level":"high"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"DSA-5862-1","title":"cacti - security update","status":"published","published":"2025-02-10T00:00:00Z","modified":"2026-03-09T02:11:17.364463Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2024:0274-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\n- cacti 1.2.27:\n  * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240)\n  * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229)\n  * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238)\n  * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239)\n  * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231)\n  * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241)\n  * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236)\n  * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235)\n  * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237)\n  * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230)\n  * Improve PHP 8.3 support\n  * When importing packages via command line, data source profile could not be selected\n  * When changing password, returning to previous page does not always work\n  * When using LDAP authentication the first time, warnings may appear in logs\n  * When editing/viewing devices, add IPv6 info to hostname tooltip\n  * Improve speed of polling when Boost is enabled\n  * Improve support for Half-Hour time zones\n  * When user session not found, device lists can be incorrectly returned\n  * On import, legacy templates may generate warnings\n  * Improve support for alternate locations of Ping\n  * Improve PHP 8.1 support for Installer\n  * Fix issues with number formatting\n  * Improve PHP 8.1 support when SpikeKill is run first time\n  * Improve PHP 8.1 support for SpikeKill\n  * When using Chinese to search for graphics, garbled characters appear.\n  * When importing templates, preview mode will not always load\n  * When remote poller is installed, MySQL TimeZone DB checks are not performed\n  * When Remote Poller installation completes, no finish button is shown\n  * Unauthorized agents should be recorded into logs\n  * Poller cache may not always update if hostname changes\n  * When using CMD poller, Failure and Recovery dates may have incorrect values\n  * Saving a Tree can cause the tree to become unpublished\n  * Web Basic Authentication does not record user logins\n  * When using Accent-based languages, translations may not work properly\n  * Fix automation expressions for device rules\n  * Improve PHP 8.1 Support during fresh install with boost\n  * Add a device 'enabled/disabled' indicator next to the graphs\n  * Notify the admin periodically when a remote data collector goes into heartbeat status\n  * Add template for Aruba Clearpass\n  * Add fliter/sort of Device Templates by Graph Templates\n\n- cacti-spine 1.2.27:\n  * Restore AES Support\n","status":"published","published":"2024-09-02T08:09:11Z","modified":"2026-02-04T03:42:28.48894Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:0276-1","title":"Security update for cacti, cacti-spine","description":"This update for cacti, cacti-spine fixes the following issues:\n\n- cacti 1.2.27:\n  * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240)\n  * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229)\n  * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238)\n  * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239)\n  * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231)\n  * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241)\n  * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236)\n  * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235)\n  * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237)\n  * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230)\n  * Improve PHP 8.3 support\n  * When importing packages via command line, data source profile could not be selected\n  * When changing password, returning to previous page does not always work\n  * When using LDAP authentication the first time, warnings may appear in logs\n  * When editing/viewing devices, add IPv6 info to hostname tooltip\n  * Improve speed of polling when Boost is enabled\n  * Improve support for Half-Hour time zones\n  * When user session not found, device lists can be incorrectly returned\n  * On import, legacy templates may generate warnings\n  * Improve support for alternate locations of Ping\n  * Improve PHP 8.1 support for Installer\n  * Fix issues with number formatting\n  * Improve PHP 8.1 support when SpikeKill is run first time\n  * Improve PHP 8.1 support for SpikeKill\n  * When using Chinese to search for graphics, garbled characters appear.\n  * When importing templates, preview mode will not always load\n  * When remote poller is installed, MySQL TimeZone DB checks are not performed\n  * When Remote Poller installation completes, no finish button is shown\n  * Unauthorized agents should be recorded into logs\n  * Poller cache may not always update if hostname changes\n  * When using CMD poller, Failure and Recovery dates may have incorrect values\n  * Saving a Tree can cause the tree to become unpublished\n  * Web Basic Authentication does not record user logins\n  * When using Accent-based languages, translations may not work properly\n  * Fix automation expressions for device rules\n  * Improve PHP 8.1 Support during fresh install with boost\n  * Add a device 'enabled/disabled' indicator next to the graphs\n  * Notify the admin periodically when a remote data collector goes into heartbeat status\n  * Add template for Aruba Clearpass\n  * Add fliter/sort of Device Templates by Graph Templates\n\n- cacti-spine 1.2.27:\n  * Restore AES Support\n","status":"published","published":"2024-09-02T16:41:32Z","modified":"2026-02-04T03:46:37.350205Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:13962-1","title":"cacti-1.2.27-1.1 on GA media","description":"These are all security issues fixed in the cacti-1.2.27-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:36:49.083892Z","updated_at":"2026-11-02T16:58:36.662953Z"}]}}