Security Advisory

CVE-2026-34189

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-10-01 09:24:43
Last updated 2026-10-01 15:05:25
Assigner PandoraFMS
CVSS score 5.9
State PUBLISHED

Description

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.