CVE-2026-34189: Pandora Fms

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.

Affected products

• Pandora Fms Pandora Fms: version 777 only

Published 2026-10-01. Last modified 2026-10-01.