Vulnerabilidades em Pandora FMS

56 resultados
Análise Vexday

Pandora FMS apresenta 48 vulnerabilidades catalogadas, sendo 4 críticas, com fraqueza predominante em injeção XSS (CWE-79) que afeta a segurança da interface web. Embora nenhuma vulnerabilidade esteja sob exploração ativa no momento, o ritmo recente de descobertas (5 nos últimos 90 dias) indica que a plataforma segue sendo alvo de pesquisa em segurança, recomendando monitoramento contínuo das correções disponibilizadas.

CVE-2026-34187HIGHSQL Injection in Graph Container ParameterEPSS 0.3%CVE-2026-30811HIGHMissing Authorization in Configuration Ajax Endpoint leads to Information DisclosureEPSS 0.3%CVE-2026-30808HIGHSession Fixation in Authentication leads to Session HijackingEPSS 0.3%CVE-2023-41814LOWXSS Vulnerability MessagesEPSS 0.3%CVE-2026-34186HIGHSQL Injection in Custom Fields leads to Database CompromiseEPSS 0.3%CVE-2023-44089MEDIUMXSS in Visual ConsoleEPSS 0.3%CVE-2026-64947HIGHCSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File ManagerEPSS 0.3%CVE-2026-64950HIGHStored Cross-Site Scripting via Directory Name in File Manager Create DirectoryEPSS 0.2%CVE-2026-64948HIGHMissing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data DisclosureEPSS 0.2%CVE-2026-75786HIGHSQL Injection in Grafana Integration Endpoint (query.php)EPSS 0.2%CVE-2023-41792MEDIUMLack of Authorization and Stored XSS Via SNMP Trap Editor PageEPSS 0.2%CVE-2026-30812LOWStored Cross-Site Scripting in Event Comments via Filter BypassEPSS 0.2%CVE-2026-64946HIGHCSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File ManagerEPSS 0.2%CVE-2026-34190MEDIUMCSRF in Alert Command DeletionEPSS 0.2%CVE-2026-34189MEDIUMCSRF in Event Response DeletionEPSS 0.2%CVE-2026-30807HIGHCross-Site Request Forgery on Extension PagesEPSS 0.1%