Remote Code Execution Flaw in Cacti, PoC Released

The CVE-2025-22604 vulnerability stems from insufficient filtering of OIDs in multi-line SNMP responses. While the values are filtered, the OIDs themselves are not, enabling attackers to manipulate the array used in system command construction.