AI-Assisted Discovery of SQL Injection & Stored XSS in Cacti Network Monitor

Disclosure status: Both vulnerabilities reported to vendor on 2026-05-13 via GitHub Pull Request. Author: Nguyen Cong Tu (iaohkut) Published: May 2026 I. Introduction This post is about a methodolog