Description
Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pandora FMS | Pandora FMS | 777 | — |
High · 7.1
CVE-2026-64948
EUVD-2026-90597GHSA-p7hw-7325-q64v
Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure
Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by PandoraFMS