EIP-2026-105680

This exploit targets a SQL injection vulnerability in Cacti 0.8.6i's 'copy_cacti_user.php' script, allowing an attacker to create a new admin user by injecting malicious SQL via the 'template_user' argument when 'register_argc_argv' is enabled.