Command Injection Vulnerability in Pandora FMS by Pandora FMS
CVE-2024-12992

Currently unrated

Key Information:

Vendor: Pandora FMS
Status: Pandora FMS
Vendor: CVE Published:; 17 March 2025

🔔 Create Pandora FMS Vulnerability Alert

What is CVE-2024-12992?

A vulnerability exists in Pandora FMS that allows an attacker to exploit improper neutralization of special elements in commands. This security flaw can lead to OS Command Injection, enabling remote code execution on affected versions. Users should promptly assess their systems, update to the latest secure version, and implement recommended security measures to mitigate risks associated with this vulnerability.

References

https://pandorafms.com/en/security/common-vulnerabilities...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 17, 2025