CVE-2026-34187

7.6 highEPSS 0.3%

High (7.6) in artica pandora fms. EPSS 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800

Severity

CVSS 4.0

7.6 high

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C/RE:L/U:Amber

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-05-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

artica:pandora_fms

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Check your stack JSON