← volver
CVE-2026-30811

Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure

CVSS 8.4 HIGHEPSS 0.3%CWE-276
Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:H/S:N/AU:Y/R:U/V:C/RE:L/U:Amber
Productos afectados
Pandora FMS · Pandora FMS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →