Login Request a demo
PF
Vendor
Pandora FMS
2 products with CVEs on record
56
CVEs
0
On KEV
8
New 30D
Products
PF
Pandora FMS
Pandora FMS
9.8
54 CVEs0 on KEV8 new
PI
Pandora ITSM
Pandora FMS
7.0
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-75786
PF
Pandora FMS
Pandora FMS
7.2
0%
Oct 1SQL Injection in Grafana Integration Endpoint (query.php)
CVE-2026-64950
PF
Pandora FMS
Pandora FMS
8.4
0%
Oct 1Stored Cross-Site Scripting via Directory Name in File Manager Create Directory
CVE-2026-64949
PF
Pandora FMS
Pandora FMS
8.6
0%
Oct 1Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager
CVE-2026-64948
PF
Pandora FMS
Pandora FMS
7.1
0%
Oct 1Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure
CVE-2026-64947
PF
Pandora FMS
Pandora FMS
7.5
0%
Oct 1CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager
CVE-2026-64946
PF
Pandora FMS
Pandora FMS
7.4
0%
Oct 1CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File Manager
CVE-2026-34190
PF
Pandora FMS
Pandora FMS
5.9
0%
Oct 1CSRF in Alert Command Deletion
CVE-2026-34189
PF
Pandora FMS
Pandora FMS
5.9
0%
Oct 1CSRF in Event Response Deletion
CVE-2026-34187
PF
Pandora FMS
Pandora FMS
9.8
0%
May 12SQL Injection in Graph Container Parameter
CVE-2026-30810
PF
Pandora FMS
Pandora FMS
8.8
0%
May 12Server-Side Request Forgery in API Checker leads to Privilege Escalation
CVE-2026-30808
PF
Pandora FMS
Pandora FMS
8.1
0%
May 12Session Fixation in Authentication leads to Session Hijacking
CVE-2026-30807
PF
Pandora FMS
Pandora FMS
8.8
0%
May 12Cross-Site Request Forgery on Extension Pages
CVE-2026-30805
PF
Pandora FMS
Pandora FMS
9.1
0%
May 12Insecure Default Initialization in API Authentication leads to Authentication Bypass
CVE-2026-34188
PF
Pandora FMS
Pandora FMS
7.2
1%
Apr 13OS Command Injection in Event Response Execution
CVE-2026-34186
PF
Pandora FMS
Pandora FMS
8.8
0%
Apr 13SQL Injection in Custom Fields leads to Database Compromise
CVE-2026-30813
PF
Pandora FMS
Pandora FMS
8.8
0%
Apr 13SQL Injection in Module Search leads to Database Compromise
CVE-2026-30812
PF
Pandora FMS
Pandora FMS
5.4
0%
Apr 13Stored Cross-Site Scripting in Event Comments via Filter Bypass
CVE-2026-30811
PF
Pandora FMS
Pandora FMS
6.5
0%
Apr 13Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure
CVE-2026-30809
PF
Pandora FMS
Pandora FMS
8.8
1%
Apr 13OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution
CVE-2026-30806
PF
Pandora FMS
Pandora FMS
8.8
1%
Apr 13OS Command Injection in Network Report leads to Remote Code Execution
CVE-2026-30804
PF
Pandora FMS
Pandora FMS
7.2
0%
Apr 13Unrestricted File Upload in Extension Uploader leads to Remote Code Execution
CVE-2025-5306
PF
Pandora FMS
Pandora FMS
9.8
36%
Jun 27Command Injection in Netflow path
CVE-2025-4678
PI
Pandora ITSM
Pandora FMS
7.0
1%
Jun 10Remote Code Execution leads to Command Injection
CVE-2025-4653
PI
Pandora ITSM
Pandora FMS
7.0
3%
Jun 10Remote Code Execution leads to Command Injection
CVE-2024-12992
PF
Pandora FMS
Pandora FMS
9.8
1%
Mar 17Remote Code Execution leads to Command Injection
CVE-2024-12971
PF
Pandora FMS
Pandora FMS
8.8
61%
Mar 17QuickShell Authenticated Command Injection
CVE-2024-11320
PF
Pandora FMS
Pandora FMS
9.8
91%
Nov 21Command Injection leading to RCE via LDAP Misconfiguration
CVE-2024-35308
PF
Pandora FMS
Pandora FMS
8.8
1%
Oct 22Post-auth Arbitrary File Read in the Server Plugins Section
CVE-2024-9987
PF
Pandora FMS
Pandora FMS
8.8
0%
Oct 22SQL Injection in CSV Module Data Collection
CVE-2024-35307
PF
Pandora FMS
Pandora FMS
9.8
1%
Jun 10Argument Injection Leading to Remote Code Execution in Realtime Graph Extension
CVE-2024-35306
PF
Pandora FMS
Pandora FMS
9.8
1%
Jun 10OS Command injection in Ajax PHP files through HTTP Request
CVE-2024-35305
PF
Pandora FMS
Pandora FMS
9.8
0%
Jun 10Unauth Time-Based SQL Injection via API
CVE-2024-35304
PF
Pandora FMS
Pandora FMS
9.8
1%
Jun 10System command injection through Netflow function
CVE-2023-41793
PF
Pandora FMS
Pandora FMS
6.5
0%
Mar 19Path Traversal and Untrusted Upload File
CVE-2023-44092
PF
Pandora FMS
Pandora FMS
9.1
1%
Mar 19OS Command Injection
CVE-2023-44091
PF
Pandora FMS
Pandora FMS
9.8
0%
Mar 19Unauth Time-Based SQL Injection
CVE-2023-44090
PF
Pandora FMS
Pandora FMS
6.4
0%
Mar 19UnautH SQL Injection
CVE-2023-44089
PF
Pandora FMS
Pandora FMS
6.1
0%
Dec 29XSS in Visual Console
CVE-2023-44088
PF
Pandora FMS
Pandora FMS
8.8
1%
Dec 29SQL Injection in Visual Console
CVE-2023-41815
PF
Pandora FMS
Pandora FMS
6.1
0%
Dec 29XSS in File manager
CVE-2023-41814
PF
Pandora FMS
Pandora FMS
6.1
0%
Dec 29XSS Vulnerability Messages
CVE-2023-41813
PF
Pandora FMS
Pandora FMS
6.1
0%
Dec 29User notification settings edition
CVE-2023-41812
PF
Pandora FMS
Pandora FMS
8.8
1%
Nov 23Uploading executables via the file manager
CVE-2023-41811
PF
Pandora FMS
Pandora FMS
6.1
0%
Nov 23Stored XSS Via Site News Page
CVE-2023-41810
PF
Pandora FMS
Pandora FMS
6.1
0%
Nov 23Stored XSS Via Dashboard Panel
CVE-2023-41808
PF
Pandora FMS
Pandora FMS
7.5
1%
Nov 23Arbitrary File Read As Root Via GoTTY Page
CVE-2023-41807
PF
Pandora FMS
Pandora FMS
8.8
1%
Nov 23Linux Local Privilege Escalation Via GoTTY Page
CVE-2023-41806
PF
Pandora FMS
Pandora FMS
7.5
0%
Nov 23Misassignment of privileges can cause DOS attack
CVE-2023-41792
PF
Pandora FMS
Pandora FMS
6.1
0%
Nov 23Lack of Authorization and Stored XSS Via SNMP Trap Editor Page
CVE-2023-41791
PF
Pandora FMS
Pandora FMS
5.4
0%
Nov 23Lack of Authorization and Stored XSS Via Translation Abuse
CVE-2023-41790
PF
Pandora FMS
Pandora FMS
9.8
1%
Nov 23Traversal Path on PHP file
CVE-2023-41789
PF
Pandora FMS
Pandora FMS
6.1
0%
Nov 23Unauthenticated Admin Account Takeover Via XSS
CVE-2023-41788
PF
Pandora FMS
Pandora FMS
8.8
1%
Nov 23Remote Code Execution via File Uploader
CVE-2023-41787
PF
Pandora FMS
Pandora FMS
7.5
1%
Nov 23Arbitrary File Read
CVE-2023-41786
PF
Pandora FMS
Pandora FMS
6.5
1%
Nov 23Database backups availability by low-privileged users
CVE-2023-4677
PF
Pandora FMS
Pandora FMS
9.8
0%
Nov 23Unauthenticated Admin Account Takeover Via Cron Log File Backups