SQL Injection Vulnerability in Pandora FMS by Pandora FMS
CVE-2026-34186

8.7HIGH

Key Information:

Vendor

Pandora Fms

Status
Pandora Fms
Vendor
CVE Published:
13 April 2026

What is CVE-2026-34186?

A security vulnerability exists in Pandora FMS that permits SQL Injection through custom fields. This flaw allows unauthorized users to manipulate SQL queries, potentially compromising the integrity and confidentiality of the data. Versions 777 through 800 of Pandora FMS are impacted, making it crucial for users to implement timely security measures to safeguard their systems.

Affected Version(s)

Pandora FMS all 777 <= 800

References

https://pandorafms.com/en/security/common-vulnerabilities...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pedro J. Núñez-Cacho Fuentes <tunelko@gmail.com>
.