CVE-2025-5306

Command Injection in Netflow path

CVSS 7 HIGHEPSS 19.9%CWE-77

Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through 778

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:U/V:D/RE:M/U:Green

Affected products

Pandora FMS · Pandora FMS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/