CVE-2024-35307
CRITICALArtica Pandora Fms < 777 - Remote Code Execution
Title source: ruleDescription
Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through <777.
Scores
CVSS v3
9.8
EPSS
0.1535
EPSS Percentile
94.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-88
Status
published
Affected Products (1)
artica/pandora_fms
< 777
Timeline
Published
Jun 10, 2024
Tracked Since
Feb 18, 2026