Browse CVEs

CRITICAL 9.8 CVE-2026-34187 Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affec… Pandora Fms 777.17 / 802+ Fix from $2,3002026-05-12 HIGH 8.8 CVE-2026-30810 Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800 Pandora Fms 777.17 / 802+ Fix from $1,9502026-05-12 CRITICAL 9.1 CVE-2026-30805 Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 throu… Pandora Fms 777.17 / 802+ Fix from $2,3002026-05-12 HIGH 8.8 CVE-2026-30807 Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: fro… Pandora Fms 777.17 / 802+ Fix from $1,9502026-05-12 HIGH 8.1 CVE-2026-30808 Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800 Pandora Fms 777.17 / 802+ Fix from $1,9502026-05-12 HIGH 8.8 CVE-2026-34186 Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora F… Pandora Fms 800.1+ Fix from $1,9502026-04-13 HIGH 7.2 CVE-2026-34188 Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue … Pandora Fms 800.1+ Fix from $1,9502026-04-13 HIGH 8.8 CVE-2026-30813 Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora F… Pandora Fms 800.1+ Fix from $1,9502026-04-13 MEDIUM 5.4 CVE-2026-30812 Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects P… Pandora Fms 800.1+ Fix from $1,6002026-04-13 HIGH 8.8 CVE-2026-30806 Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pa… Pandora Fms 800.1+ Fix from $1,9502026-04-13 HIGH 8.8 CVE-2026-30809 Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affe… Pandora Fms 800.1+ Fix from $1,9502026-04-13 HIGH 7.2 CVE-2026-30804 Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 … Pandora Fms 800.1+ Fix from $1,9502026-04-13 MEDIUM 6.5 CVE-2026-30811 Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 thr… Pandora Fms 800.1+ Fix from $1,6002026-04-13 CRITICAL 9.8 CVE-2025-5306EPSS 31% Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through… Pandora Fms after 778 Fix from $2,3002025-06-27 CRITICAL 9.8 CVE-2024-12992 Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE. This issue affects Pandora FMS fro… Pandora Fms 777.8+ Fix from $2,3002025-03-17 HIGH 8.8 CVE-2024-12971EPSS 58% Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 77… Pandora Fms 777.8+ Fix from $1,9502025-03-17 CRITICAL 9.8 CVE-2024-35304 System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This iss… Pandora Fms 777+ Fix from $2,3002024-06-10 CRITICAL 9.8 CVE-2024-35305 Unauth Time-Based SQL Injection in API allows to exploit HTTP request Authorization header. This issue affects Pandora FMS: from 700 through <777. Pandora Fms 777+ Fix from $2,3002024-06-10 CRITICAL 9.8 CVE-2024-35306 OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: f… Pandora Fms 777+ Fix from $2,3002024-06-10 CRITICAL 9.8 CVE-2024-35307 Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the … Pandora Fms 777+ Fix from $2,3002024-06-10 CRITICAL 9.8 CVE-2023-44091 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. This u… Pandora Fms 776+ Fix from $2,3002024-03-19 CRITICAL 9.1 CVE-2023-44092 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Inje… Pandora Fms 776+ Fix from $2,3002024-03-19 MEDIUM 6.5 CVE-2023-41793 : Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and do… Pandora Fms 776+ Fix from $1,6002024-03-19 MEDIUM 6.4 CVE-2023-44090 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This v… Pandora Fms 776+ Fix from $1,6002024-03-19 CRITICAL 9.8 CVE-2023-4677 Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs… Pandora Fms 773+ Fix from $2,3002023-11-23 HIGH 8.8 CVE-2023-41812 Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. … Pandora Fms 774+ Fix from $1,9502023-11-23 MEDIUM 6.1 CVE-2023-41811 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting … Pandora Fms after 773 Fix from $1,6002023-11-23 HIGH 8.8 CVE-2023-41807 Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows a user to escalate permissio… Pandora Fms after 773 Fix from $1,9502023-11-23 HIGH 7.5 CVE-2023-41806 Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignm… Pandora Fms after 773 Fix from $1,9502023-11-23 HIGH 7.5 CVE-2023-41808 Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to esca… Pandora Fms after 773 Fix from $1,9502023-11-23