PF
Product
Pandora FMS
54
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 25Medium 16Low 0
Watch
Add Pandora FMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34187 | 9.8 | May 12 | SQL Injection in Graph Container Parameter Affected: 777 through 800 |
| CVE-2025-5306 | 9.8 | Jun 27 | Command Injection in Netflow path Affected: 774 through 778 |
| CVE-2024-12992 | 9.8 | Mar 17 | Remote Code Execution leads to Command Injection Affected: 768 through 780 |
| CVE-2024-11320 | 9.8 | Nov 21 | Command Injection leading to RCE via LDAP Misconfiguration Affected: 700 through 777.4 |
| CVE-2024-35307 | 9.8 | Jun 10 | Argument Injection Leading to Remote Code Execution in Realtime Graph Extension Affected: 700 before 777 |
| CVE-2024-35306 | 9.8 | Jun 10 | OS Command injection in Ajax PHP files through HTTP Request Affected: 700 before 777 |
| CVE-2024-35305 | 9.8 | Jun 10 | Unauth Time-Based SQL Injection via API Affected: 700 before 777 |
| CVE-2024-35304 | 9.8 | Jun 10 | System command injection through Netflow function Affected: 700 before 777 |
| CVE-2023-44091 | 9.8 | Mar 19 | Unauth Time-Based SQL Injection Affected: 700 through <776 |
| CVE-2023-41790 | 9.8 | Nov 23 | Traversal Path on PHP file Affected: 700 through 773 |
| CVE-2023-4677 | 9.8 | Nov 23 | Unauthenticated Admin Account Takeover Via Cron Log File Backups Affected: 700 through 772 |
| CVE-2026-30805 | 9.1 | May 12 | Insecure Default Initialization in API Authentication leads to Authentication Bypass Affected: 777 through 800 |
| CVE-2023-44092 | 9.1 | Mar 19 | OS Command Injection Affected: 700 through <776 |
Showing 13