RCE in Pandora Fms

CVE-2026-30809

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.002 (36.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References