CVE-2022-26309: Pandorafms Pandora Fms

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation (User operation) resulting in elevation of privilege to Administrator group.

Affected products

• Pandorafms Pandora Fms: up to and including 7.0_ng_759

Published 2022-08-01. Last modified 2026-06-17.