CVE-2026-40084 | Cacti up to 1.2.30 lib/html_reports.php Save path traversal (GHSA-mjvw-mhj5-9jcj / Nessus ID 323775)

A vulnerability labeled as critical has been found in Cacti up to 1.2.30. Affected is an unknown function in the library lib/html_reports.php. The manipulation of the argument Save results in path traversal. This vulnerability is identified as CVE-2026-40084. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.