CVE-2026-64948: Pandora Fms

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards.

Affected products

• Pandora Fms Pandora Fms: version 777 only

Published 2026-10-01. Last modified 2026-10-01.