How many CVEs does Artica pandora fms have?

Artica pandora fms has 96 published CVE records since 2010.

How many Artica pandora fms CVEs are in CISA KEV?

None of Artica pandora fms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Artica pandora fms vulnerabilities?

Yes — 30 of Artica pandora fms's CVEs have a known public exploit.

Which versions of Artica pandora fms are affected?

55 distinct Artica pandora fms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Artica pandora fms CVEs?

Artica pandora fms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-434 (Unrestricted Upload of File with Dangerous Type).

How many critical Artica pandora fms vulnerabilities are there?

Artica pandora fms has 18 critical and 44 high-severity CVEs.

What is the average severity of Artica pandora fms CVEs?

The average CVSS base score across Artica pandora fms's scored CVEs is 7.6.

Artica pandora fms Vulnerabilities: CVEs, CISA KEV & Security Advisories

SQL Injection in Graph Container Parameter

CVE-2026-34187

Patch

CWE-89

High · CVSS 7.6

EPSS 0.4% (30th pct)2026-05-12

Server-Side Request Forgery in API Checker leads to Privilege Escalation

CVE-2026-30810

Patch

CWE-918

High · CVSS 7.1

EPSS 0.4% (35th pct)2026-05-12

Session Fixation in Authentication leads to Session Hijacking

CVE-2026-30808

Patch

CWE-384

High · CVSS 7.6

EPSS 0.4% (29th pct)2026-05-12

Cross-Site Request Forgery on Extension Pages

CVE-2026-30807

Patch

CWE-352

High · CVSS 7.1

EPSS 0.2% (7th pct)2026-05-12

Insecure Default Initialization in API Authentication leads to Authentication Bypass

CVE-2026-30805

Patch

CWE-1188

Critical · CVSS 9.1

EPSS 0.5% (40th pct)2026-05-12

OS Command Injection in Event Response Execution

CVE-2026-34188

Patch

CWE-78

High · CVSS 7.5

EPSS 1.7% (77th pct)2026-04-13

SQL Injection in Custom Fields leads to Database Compromise

CVE-2026-34186

Patch

CWE-89

High · CVSS 8.7

EPSS 0.4% (37th pct)2026-04-13

SQL Injection in Module Search leads to Database Compromise

CVE-2026-30813

Patch

CWE-89

High · CVSS 8.7

EPSS 0.4% (37th pct)2026-04-13

Stored Cross-Site Scripting in Event Comments via Filter Bypass

CVE-2026-30812

Patch

CWE-79

Low · CVSS 2.1

EPSS 0.2% (13th pct)2026-04-13

Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure

CVE-2026-30811

Patch

CWE-276

High · CVSS 8.4

EPSS 0.3% (26th pct)2026-04-13

OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution

CVE-2026-30809

Patch

CWE-78

High · CVSS 8.7

EPSS 1.6% (75th pct)2026-04-13

OS Command Injection in Network Report leads to Remote Code Execution

CVE-2026-30806

Patch

CWE-78

High · CVSS 8.7

EPSS 1.6% (75th pct)2026-04-13

Unrestricted File Upload in Extension Uploader leads to Remote Code Execution

CVE-2026-30804

Patch

CWE-434

High · CVSS 8.6

EPSS 0.8% (54th pct)2026-04-13

Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection

CVE-2014-125124

Public exploit

CWE-78

Critical · CVSS 10.0

EPSS 2.1% (82th pct)2025-07-31

Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

CVE-2014-125115

Public exploit

CWE-89

Critical · CVSS 10.0

EPSS 2.5% (84th pct)2025-07-25

Pandora FMS Authenticated Remote Code Execution via Ping Module

CVE-2025-34088

Public exploit

CWE-78

High · CVSS 8.6

EPSS 7.2% (94th pct)2025-07-03

Command Injection in Netflow path

CVE-2025-5306

Public exploit

Patch

CWE-77

High · CVSS 7.0

EPSS 35.7% (98th pct)2025-06-27

High vulnerability · 2025-03-17

CVE-2024-12992

Patch

CWE-77

High · CVSS 8.6

EPSS 1.2% (68th pct)2025-03-17

High vulnerability · 2025-03-17

CVE-2024-12971

Public exploit

Patch

CWE-77

High · CVSS 8.6

EPSS 61.5% (99th pct)2025-03-17

Critical vulnerability · 2024-06-10

CVE-2024-35307

Patch

CWE-88

Critical · CVSS 9.4

EPSS 0.9% (59th pct)2024-06-10

OS Command injection in Ajax PHP files through HTTP Request

CVE-2024-35306

Patch

CWE-78

High · CVSS 8.7

EPSS 0.9% (60th pct)2024-06-10

High vulnerability · 2024-06-10

CVE-2024-35305

Patch

CWE-89

High · CVSS 8.9

EPSS 0.4% (30th pct)2024-06-10

Critical vulnerability · 2024-06-10

CVE-2024-35304

Patch

CWE-78

Critical · CVSS 9.3

EPSS 1.1% (65th pct)2024-06-10

Medium vulnerability · 2024-03-19

CVE-2023-41793

Patch

CWE-35

Medium · CVSS 6.7

EPSS 0.4% (31th pct)2024-03-19

Critical vulnerability · 2024-03-19

CVE-2023-44092

Patch

CWE-78

Critical · CVSS 9.1

EPSS 0.8% (57th pct)2024-03-19

Critical vulnerability · 2024-03-19

CVE-2023-44091

Patch

CWE-89

Critical · CVSS 9.8

EPSS 0.5% (38th pct)2024-03-19

Medium vulnerability · 2024-03-19

CVE-2023-44090

Patch

CWE-89

Medium · CVSS 6.8

EPSS 0.3% (26th pct)2024-03-19

High vulnerability · 2023-11-23

CVE-2023-41812

Patch

CWE-434

High · CVSS 8.8

EPSS 0.6% (46th pct)2023-11-23

Medium vulnerability · 2023-11-23

CVE-2023-41811

Patch

CWE-79

Medium · CVSS 6.1

EPSS 0.3% (24th pct)2023-11-23

Medium vulnerability · 2023-11-23

CVE-2023-41810

Patch

CWE-79

Medium · CVSS 6.1

EPSS 0.3% (24th pct)2023-11-23

Artica pandora fms Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Artica products

Frequently asked questions

References

Track Artica pandora fms vulnerabilities