CVE-2026-30811
Received
Received - Intake
Missing Authorization in Pandora FMS Configuration Exposes Sensitive Data
Publication date: 2026-04-13
Last updated on: 2026-04-22
Assigner: Artica PFMS
Description
Description
Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| artica | pandora_fms | From 777 (inc) to 800.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-276 | During installation, installed file permissions are set to allow anyone to modify those files. |