Server-Side Request Forgery Vulnerability in Pandora FMS by Pandora FMS
CVE-2026-30810

7.1HIGH

Key Information:

Vendor

Pandora Fms

Status
Pandora Fms
Vendor
CVE Published:
12 May 2026

What is CVE-2026-30810?

A Server-Side Request Forgery vulnerability exists in the API Checker extension of Pandora FMS, enabling attackers to execute requests on behalf of the server. This flaw affects versions 777 through 800 of Pandora FMS, potentially allowing unauthorized access and privilege escalation within the system.

Affected Version(s)

Pandora FMS all 777 <= 800

References

https://pandorafms.com/en/security/common-vulnerabilities...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pedro J. Núñez-Cacho Fuentes <tunelko@gmail.com>
.