// CVE · PUBLISHED 2026-05-12
CVE-2026-30805 Pandora FMS / Pandora FMS
9.1 · CVSS 4.0 Critical
Description Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products Pandora FMS / Pandora FMS Published 12 May 2026 Modified 11 Nov 2026 CVSS 9.1 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:M/U:Amber Score source security@pandorafms.com CWE CWE-1188 Record status Analyzed