SQL Injection in Pandora Fms
CVE-2026-30813
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800
Vulnerability class: SQL Injection
EPSS: 0.000 (11.4th percentile) — read the EPSS interpretation.
Affected products
- Pandora Fms — versions 777