CVE-2026-34190: Pandora Fms

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.

Affected products

• Pandora Fms Pandora Fms: version 777 only

Published 2026-10-01. Last modified 2026-10-01.