CVE-2025-5306

CVE-2025-5306 describes a command-injection vulnerability in Pandora FMS, specifically in the Netflow component. The issue is triggered by improper neutralization of special elements in the Netflow directory field, affecting Pandora FMS versions 774–778. Connected sources confirm a concrete explo...