PT-2026-32382 · Pandora Systems · Pandora Fms

Published 2026-04-13 · Updated 2026-04-13 · CVE-2026-30804

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 777 through 800

Description Unrestricted Upload of File with Dangerous Type allows Remote Code Execution via file upload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-30804

Affected Products

Pandora Fms

References · 3

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30804 · Security Note
• https://twitter.com/CVEnew/status/2043733029177438660 · Twitter Post