PF
Product
Pandora FMS
54
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 25Medium 16Low 0
Watch
Add Pandora FMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30811 | 6.5 | Apr 13 | Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure Affected: 777 through 800 |
| CVE-2023-41793 | 6.5 | Mar 19 | Path Traversal and Untrusted Upload File Affected: 700 through <776 |
| CVE-2023-41786 | 6.5 | Nov 23 | Database backups availability by low-privileged users Affected: 700 through 772 |
| CVE-2023-44090 | 6.4 | Mar 19 | UnautH SQL Injection Affected: 700 through <776 |
| CVE-2023-44089 | 6.1 | Dec 29 | XSS in Visual Console Affected: 700 through 774 |
| CVE-2023-41815 | 6.1 | Dec 29 | XSS in File manager Affected: 700 through 774 |
| CVE-2023-41814 | 6.1 | Dec 29 | XSS Vulnerability Messages Affected: 700 through 774 |
| CVE-2023-41813 | 6.1 | Dec 29 | User notification settings edition Affected: 700 through 774 |
| CVE-2023-41811 | 6.1 | Nov 23 | Stored XSS Via Site News Page Affected: 700 through 773 |
| CVE-2023-41810 | 6.1 | Nov 23 | Stored XSS Via Dashboard Panel Affected: 700 through 773 |
| CVE-2023-41792 | 6.1 | Nov 23 | Lack of Authorization and Stored XSS Via SNMP Trap Editor Page Affected: 700 through 773 |
| CVE-2023-41789 | 6.1 | Nov 23 | Unauthenticated Admin Account Takeover Via XSS Affected: 700 through 773 |
| CVE-2026-34190 | 5.9 | Oct 1 | CSRF in Alert Command Deletion Affected: 777 |
| CVE-2026-34189 | 5.9 | Oct 1 | CSRF in Event Response Deletion Affected: 777 |
| CVE-2026-30812 | 5.4 | Apr 13 | Stored Cross-Site Scripting in Event Comments via Filter Bypass Affected: 777 through 800 |
| CVE-2023-41791 | 5.4 | Nov 23 | Lack of Authorization and Stored XSS Via Translation Abuse Affected: 700 through 773 |
Showing 16