CVE-2026-30811

Received Received - Intake

Missing Authorization in Pandora FMS Configuration Exposes Sensitive Data

Publication date: 2026-04-13

Last updated on: 2026-04-22

Assigner: Artica PFMS

Description

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-13

Last Modified

2026-04-22

Generated

2026-07-06

AI Q&A

2026-04-13

EPSS Evaluated

2026-07-05

NVD

CVE-2026-30811

EUVD

EUVD-2026-21992

Affected Vendors & Products

Vendor	Product	Version / Range
artica	pandora_fms	From 777 (inc) to 800.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability is a Missing Authorization issue that allows exposure of sensitive information through a configuration endpoint in Pandora FMS versions from 777 through 800.

Impact Analysis

The vulnerability can lead to unauthorized access to sensitive information, potentially compromising confidentiality and security of the affected system.

Compliance Impact

The vulnerability is a Missing Authorization issue that allows exposure of sensitive information via a configuration endpoint in Pandora FMS versions from 777 through 800.

Exposure of sensitive information due to missing authorization can lead to non-compliance with data protection regulations such as GDPR and HIPAA, which require strict controls to protect personal and sensitive data from unauthorized access.

Therefore, this vulnerability could negatively impact compliance with these standards by potentially allowing unauthorized parties to access sensitive information.

Hi! I’m here to help you understand CVE-2026-30811. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70