Skip to content
OpenAdvisories
High · 8.7 CVE-2026-34186 EUVD-2026-21998GHSA-4hgf-5jwc-7v3g

SQL Injection in Custom Fields leads to Database Compromise

Published Apr 13, 2026 · Updated Apr 13, 2026 · Assigned by PandoraFMS

Description

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 777 – ≤ 800 —

References