Critical · 9.1 CVE-2026-30805 EUVD-2026-29494GHSA-m2m9-vhw3-w774

Insecure Default Initialization in API Authentication leads to Authentication Bypass

Published May 12, 2026 · Updated May 12, 2026 · Assigned by PandoraFMS

Vendor: Pandora FMS Product: Pandora FMS

Description

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800

Affected products

Vendor	Product	Affected	Fixed
Pandora FMS	Pandora FMS	777 – ≤ 800	—

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/