Skip to content
OpenAdvisories

Vendor

Pandora FMS

56 known vulnerabilities.

Products

Pandora FMS 54 Pandora ITSM 2
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.0
    CVE-2025-5306 Public exploit EPSS 36%

    Command Injection in Netflow path

    Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through 778

    Pandora FMS Pandora FMS
  • High 7.0
    CVE-2025-4653 Public exploit

    Remote Code Execution leads to Command Injection

    Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105.

    Pandora FMS Pandora ITSM
  • High 8.6
    CVE-2024-12971 Public exploit EPSS 61%

    QuickShell Authenticated Command Injection

    Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6

    Pandora FMS Pandora FMS
  • Medium 6.9
    CVE-2024-11320 Public exploit Scanner template EPSS 91%

    Command Injection leading to RCE via LDAP Misconfiguration

    Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through <=777.4

    Pandora FMS Pandora FMS
  • Medium 5.9
    CVE-2023-44088 Public exploit

    SQL Injection in Visual Console

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora …

    Pandora FMS Pandora FMS