CVE-2026-75786

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards.

  • Published Oct 1, 2026
  • CVSS 7.2 high
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-75786 at the National Vulnerability Database