A vulnerability described as critical has been identified in Cacti up to 1.2.28. This affects an unknown part of the component SNMP Handler. Such manipulation leads to command injection.

This vulnerability is traded as CVE-2025-66399. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.