https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-34187.htmlhttps://patchthecve.com/cve/CVE-2026-34187.htmlWed, 17 Jun 2026 10:38:37 +0000CRITICAL 9.8: Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30810.htmlhttps://patchthecve.com/cve/CVE-2026-30810.htmlWed, 17 Jun 2026 10:32:57 +0000HIGH 8.8: Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30808.htmlhttps://patchthecve.com/cve/CVE-2026-30808.htmlWed, 17 Jun 2026 10:32:56 +0000HIGH 8.1: Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30807.htmlhttps://patchthecve.com/cve/CVE-2026-30807.htmlWed, 17 Jun 2026 10:32:56 +0000HIGH 8.8: Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30805.htmlhttps://patchthecve.com/cve/CVE-2026-30805.htmlWed, 17 Jun 2026 10:32:56 +0000CRITICAL 9.1: Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-34188.htmlhttps://patchthecve.com/cve/CVE-2026-34188.htmlWed, 17 Jun 2026 10:38:37 +0000HIGH 7.2: Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-34186.htmlhttps://patchthecve.com/cve/CVE-2026-34186.htmlWed, 17 Jun 2026 10:38:37 +0000HIGH 8.8: Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30813.htmlhttps://patchthecve.com/cve/CVE-2026-30813.htmlWed, 17 Jun 2026 10:32:57 +0000HIGH 8.8: Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30812.htmlhttps://patchthecve.com/cve/CVE-2026-30812.htmlWed, 17 Jun 2026 10:32:57 +0000MEDIUM 5.4: Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30811.htmlhttps://patchthecve.com/cve/CVE-2026-30811.htmlWed, 17 Jun 2026 10:32:57 +0000MEDIUM 6.5: Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30809.htmlhttps://patchthecve.com/cve/CVE-2026-30809.htmlWed, 17 Jun 2026 10:32:57 +0000HIGH 8.8: Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30806.htmlhttps://patchthecve.com/cve/CVE-2026-30806.htmlWed, 17 Jun 2026 10:32:56 +0000HIGH 8.8: Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pandora FMS: from 777 through 800https://patchthecve.com/cve/CVE-2026-30804.htmlhttps://patchthecve.com/cve/CVE-2026-30804.htmlWed, 17 Jun 2026 10:32:56 +0000HIGH 7.2: Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800