CVE-2021-34074: Pandorafms Pandora Fms

Critical severity, CVSS 9.8. EPSS: 7.5% chance of exploitation in the next 30 days.

PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requests.

Affected products

• Pandorafms Pandora Fms: up to and including 754

Published 2021-06-25. Last modified 2026-06-17.