CVE-2026-30807 Cross-Site Request Forgery on Extension Pages

Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-34188

The CVE-2026-34188 entry concerns Pandora FMS (versions 777 through 800) and describes an OS command injection vulnerability. The root cause is improper neutralization of special elements used in an OS command within the Event Response execution path. Attack impact is the potential to execute OS ...

CVE-2026-30811

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800...

PT-2026-32384

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800...