CVE-2026-49442

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.31

Description An issue allows an attacker to identify valid usernames on the service. During the login process, the application returns different error messages based on whether the username exists. If the username is valid, the response is "Access Denied! Login failed.", whereas if it is invalid, the response is "Access Denied! Login Failed.". The distinction is based on the capitalization of the letter "f" in the word "failed".

Recommendations Update to version 1.2.31.