Vulnerabilities in Pandora FMS
56 resultsCVE-2026-34187HIGHSQL Injection in Graph Container ParameterEPSS 0.3%CVE-2026-30811HIGHMissing Authorization in Configuration Ajax Endpoint leads to Information DisclosureEPSS 0.3%CVE-2026-30808HIGHSession Fixation in Authentication leads to Session HijackingEPSS 0.3%CVE-2023-41814LOWXSS Vulnerability MessagesEPSS 0.3%CVE-2026-34186HIGHSQL Injection in Custom Fields leads to Database CompromiseEPSS 0.3%CVE-2023-44089MEDIUMXSS in Visual ConsoleEPSS 0.3%CVE-2026-64947HIGHCSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File ManagerEPSS 0.3%CVE-2026-64950HIGHStored Cross-Site Scripting via Directory Name in File Manager Create DirectoryEPSS 0.2%CVE-2026-64948HIGHMissing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data DisclosureEPSS 0.2%CVE-2026-75786HIGHSQL Injection in Grafana Integration Endpoint (query.php)EPSS 0.2%CVE-2023-41792MEDIUMLack of Authorization and Stored XSS Via SNMP Trap Editor PageEPSS 0.2%CVE-2026-30812LOWStored Cross-Site Scripting in Event Comments via Filter BypassEPSS 0.2%CVE-2026-64946HIGHCSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File ManagerEPSS 0.2%CVE-2026-34190MEDIUMCSRF in Alert Command DeletionEPSS 0.2%CVE-2026-34189MEDIUMCSRF in Event Response DeletionEPSS 0.2%CVE-2026-30807HIGHCross-Site Request Forgery on Extension PagesEPSS 0.1%