CVE-2026-34190
Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.
- Published Oct 1, 2026
- CVSS 5.9 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)