SQL Injection in Pandora Fms

CVE-2026-34186

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800

Vulnerability class: SQL Injection

EPSS: 0.000 (11.4th percentile) — read the EPSS interpretation.