Pandora FMS vulnerabilities

CVEs per yearBy the year they were published

1. 202319
2. 202411
3. 20255
4. 202621

Newest CVEs

• CVE-2026-75786

  SQL Injection in Grafana Integration Endpoint (query.php)

  Pandora FMS · Pandora FMS

  High7.2
• CVE-2026-64950

  Stored Cross-Site Scripting via Directory Name in File Manager Create Directory

  Pandora FMS · Pandora FMS

  High8.4
• CVE-2026-64949

  Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager

  Pandora FMS · Pandora FMS

  High8.6
• CVE-2026-64948

  Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure

  Pandora FMS · Pandora FMS

  High7.1
• CVE-2026-64947

  CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager

  Pandora FMS · Pandora FMS

  High7.5
• CVE-2026-64946

  CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File Manager

  Pandora FMS · Pandora FMS

  High7.4
• CVE-2026-34190

  CSRF in Alert Command Deletion

  Pandora FMS · Pandora FMS

  Medium5.9
• CVE-2026-34189

  CSRF in Event Response Deletion

  Pandora FMS · Pandora FMS

  Medium5.9
• CVE-2026-34187

  SQL Injection in Graph Container Parameter

  Pandora FMS · Pandora FMS

  High7.6
• CVE-2026-30810

  Server-Side Request Forgery in API Checker leads to Privilege Escalation

  Pandora FMS · Pandora FMS

  High7.1