SQL Injection Vulnerability in Pandora FMS Software by Pandora FMS
CVE-2026-30813

8.7HIGH

Key Information:

Vendor

Pandora Fms

Status
Pandora Fms
Vendor
CVE Published:
13 April 2026

What is CVE-2026-30813?

An SQL Injection vulnerability exists in the Pandora FMS software, enabling an attacker to execute arbitrary SQL commands through the module search functionality. This improper neutralization of special elements could lead to unauthorized access or manipulation of data. Versions 777 to 800 of Pandora FMS are affected, necessitating prompt action to mitigate potential exploitation risks.

Affected Version(s)

Pandora FMS all 777 <= 800

References

https://pandorafms.com/en/security/common-vulnerabilities...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pedro J. Núñez-Cacho Fuentes <tunelko@gmail.com>
.