CVE-2026-34189
Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.
- Published Oct 1, 2026
- CVSS 5.9 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)