Pandora Fms vulnerabilities

Products

• Fms 84
• Itsm 2

Newest

• pandora fms fms SQL Injection in Grafana Integration Endpoint (query.php) CVE-2026-75786 7.2 HighOctober 1, 2026
• pandora fms fms Stored Cross-Site Scripting via Directory Name in File Manager Create Directory CVE-2026-64950 8.4 HighOctober 1, 2026
• pandora fms fms Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager CVE-2026-64949 8.6 HighOctober 1, 2026
• pandora fms fms Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure CVE-2026-64948 7.1 HighOctober 1, 2026
• pandora fms fms CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager CVE-2026-64947 7.5 HighOctober 1, 2026
• pandora fms fms CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File Manager CVE-2026-64946 7.4 HighOctober 1, 2026
• pandora fms fms CSRF in Alert Command Deletion CVE-2026-34190 5.9 MediumOctober 1, 2026
• pandora fms fms CSRF in Event Response Deletion CVE-2026-34189 5.9 MediumOctober 1, 2026
• artica pandora fms, pandora fms fms +1 more SQL Injection in Graph Container Parameter CVE-2026-34187 7.6 HighMay 12, 2026
• artica pandora fms, pandora fms fms +1 more Server-Side Request Forgery in API Checker leads to Privilege Escalation CVE-2026-30810 7.1 HighMay 12, 2026
• artica pandora fms, pandora fms fms +1 more Session Fixation in Authentication leads to Session Hijacking CVE-2026-30808 7.6 HighMay 12, 2026
• artica pandora fms, pandora fms fms +1 more Cross-Site Request Forgery on Extension Pages CVE-2026-30807 7.1 HighMay 12, 2026
• artica pandora fms, pandora fms fms +1 more Insecure Default Initialization in API Authentication leads to Authentication Bypass CVE-2026-30805 9.1 CriticalMay 12, 2026
• artica pandora fms, pandora fms fms +1 more OS Command Injection in Event Response Execution CVE-2026-34188 7.5 HighApril 13, 2026
• artica pandora fms, pandora fms fms +1 more SQL Injection in Custom Fields leads to Database Compromise CVE-2026-34186 8.7 HighApril 13, 2026
• artica pandora fms, pandora fms fms +1 more SQL Injection in Module Search leads to Database Compromise CVE-2026-30813 8.7 HighApril 13, 2026
• artica pandora fms, pandora fms fms +1 more Stored Cross-Site Scripting in Event Comments via Filter Bypass CVE-2026-30812 2.1 LowApril 13, 2026
• artica pandora fms, pandora fms fms +1 more Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure CVE-2026-30811 8.4 HighApril 13, 2026
• artica pandora fms, pandora fms fms +1 more OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution CVE-2026-30809 8.7 HighApril 13, 2026
• artica pandora fms, pandora fms fms +1 more OS Command Injection in Network Report leads to Remote Code Execution CVE-2026-30806 8.7 HighApril 13, 2026
• artica pandora fms, pandora fms fms +1 more Unrestricted File Upload in Extension Uploader leads to Remote Code Execution CVE-2026-30804 8.6 HighApril 13, 2026
• artica st pandora fms, pandora fms fms +1 more Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection CVE-2014-125124 Public exploit 10.0 CriticalJuly 31, 2025
• artica st pandora fms, pandora fms fms +1 more Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE CVE-2014-125115 Public exploit 10.0 CriticalJuly 25, 2025
• artica st pandora fms, pandora fms fms +1 more Pandora FMS Authenticated Remote Code Execution via Ping Module CVE-2025-34088 Public exploit 8.6 HighJuly 3, 2025
• artica pandora fms, pandora fms fms +1 more Command Injection in Netflow path CVE-2025-5306 Public exploit EPSS 35.7% 7.0 HighJune 27, 2025
• pandora fms itsm Remote Code Execution leads to Command Injection CVE-2025-4678 7.0 HighJune 10, 2025
• pandora fms itsm Remote Code Execution leads to Command Injection CVE-2025-4653 Public exploit 7.0 HighJune 10, 2025
• artica pandora fms, pandora fms fms +1 more Remote Code Execution leads to Command Injection CVE-2024-12992 8.6 HighMarch 17, 2025
• artica pandora fms, pandora fms fms +1 more QuickShell Authenticated Command Injection CVE-2024-12971 Public exploit EPSS 61.5% 8.6 HighMarch 17, 2025
• pandora fms fms, pandorafms pandora fms +1 more Command Injection leading to RCE via LDAP Misconfiguration CVE-2024-11320 Public exploit EPSS 91.2% 6.9 MediumNovember 21, 2024
• pandora fms fms, pandorafms pandora fms +1 more Post-auth Arbitrary File Read in the Server Plugins Section CVE-2024-35308 8.3 HighOctober 22, 2024
• pandora fms fms, pandorafms pandora fms +1 more SQL Injection in CSV Module Data Collection CVE-2024-9987 8.6 HighOctober 22, 2024
• artica pandora fms, pandora fms fms +1 more Argument Injection Leading to Remote Code Execution in Realtime Graph Extension CVE-2024-35307 9.4 CriticalJune 10, 2024
• artica pandora fms, pandora fms fms +1 more OS Command injection in Ajax PHP files through HTTP Request CVE-2024-35306 8.7 HighJune 10, 2024
• artica pandora fms, pandora fms fms +1 more Unauth Time-Based SQL Injection via API CVE-2024-35305 8.9 HighJune 10, 2024
• artica pandora fms, pandora fms fms +1 more System command injection through Netflow function CVE-2024-35304 9.3 CriticalJune 10, 2024
• artica pandora fms, pandora fms fms +1 more Path Traversal and Untrusted Upload File CVE-2023-41793 6.7 MediumMarch 19, 2024
• artica pandora fms, pandora fms fms +1 more OS Command Injection CVE-2023-44092 7.6 HighMarch 19, 2024
• artica pandora fms, pandora fms fms +1 more Unauth Time-Based SQL Injection CVE-2023-44091 7.5 HighMarch 19, 2024
• artica pandora fms, pandora fms fms +1 more UnautH SQL Injection CVE-2023-44090 6.8 MediumMarch 19, 2024
• pandora fms fms, pandorafms pandora fms +1 more XSS in Visual Console CVE-2023-44089 6.1 MediumDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more SQL Injection in Visual Console CVE-2023-44088 Public exploit 5.9 MediumDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more XSS in File manager CVE-2023-41815 7.5 HighDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more XSS Vulnerability Messages CVE-2023-41814 3.7 LowDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more User notification settings edition CVE-2023-41813 3.0 LowDecember 29, 2023
• artica pandora fms, pandora fms fms +1 more Uploading executables via the file manager CVE-2023-41812 5.7 MediumNovember 23, 2023
• artica pandora fms, pandora fms fms +1 more Stored XSS Via Site News Page CVE-2023-41811 5.3 MediumNovember 23, 2023
• artica pandora fms, pandora fms fms +1 more Stored XSS Via Dashboard Panel CVE-2023-41810 4.0 MediumNovember 23, 2023
• artica pandora fms, pandora fms fms +1 more Arbitrary File Read As Root Via GoTTY Page CVE-2023-41808 8.5 HighNovember 23, 2023
• artica pandora fms, pandora fms fms +1 more Linux Local Privilege Escalation Via GoTTY Page CVE-2023-41807 9.1 CriticalNovember 23, 2023
• Show olderLoading…