Cross-Site Request Forgery in Pandora FMS by Pandora FMS
CVE-2026-30807

7.1HIGH

Key Information:

Vendor

Pandora Fms

Status
Pandora Fms
Vendor
CVE Published:
12 May 2026

What is CVE-2026-30807?

A Cross-Site Request Forgery vulnerability in Pandora FMS permits attackers to execute unauthorized actions by leveraging malicious web pages. This security flaw impacts versions 777 through 800 of the product, posing a potential risk for users who may inadvertently interact with crafted links or sites.

Affected Version(s)

Pandora FMS all 777 <= 800

References

https://pandorafms.com/en/security/common-vulnerabilities...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pedro J. Núñez-Cacho Fuentes <tunelko@gmail.com>
.