CVE-2026-34187: Artica Pandora Fms

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800

Affected products

• Artica Pandora Fms: before 777.17 (fixed in 777.17); from 778, before 802 (fixed in 802)

Published 2026-05-12. Last modified 2026-06-17.