CVE-2025-34088

HIGH

Pandora FMS <7.0NG - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2025-34088. PoCs published by Metasploit, Onur ER <[email protected]>, including Metasploit module exploits/linux/http/pandora_ping_cmd_exec.

AI-analyzed exploit summary This Metasploit module exploits an authenticated remote code execution vulnerability in Pandora FMS 7.0NG and lower via command injection in the net_tools.php component. It authenticates with provided credentials and injects commands through the 'select_ips' parameter.

Description

An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The net_tools.php functionality allows authenticated users to execute arbitrary OS commands via the select_ips parameter when performing network tools operations, such as pinging. This occurs because user input is not properly sanitized before being passed to system commands, enabling command injection.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotelinux
https://www.exploit-db.com/exploits/48334

This Metasploit module exploits an authenticated remote code execution vulnerability in Pandora FMS 7.0NG and lower via command injection in the net_tools.php component. It authenticates with provided credentials and injects commands through the 'select_ips' parameter.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Pandora FMS <= 7.0NG
Auth required
Prerequisites: Valid credentials for Pandora FMS · Network access to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
by Onur ER <[email protected]> · rubypoclinux
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_ping_cmd_exec.rb

This Metasploit module exploits an authenticated remote code execution vulnerability in Pandora FMS 7.0NG and lower via command injection in the net_tools.php component. It authenticates with provided credentials and injects commands through the 'select_ips' parameter.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Pandora FMS <= 7.0NG
Auth required
Prerequisites: Valid credentials for Pandora FMS · Network access to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Scores

CVSS v3 8.8
EPSS 0.7412
EPSS Percentile 98.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-78
Status published
Products (2)
Artica ST/Pandora FMS < 7.0NG
pandorafms/pandora_fms < 7.0_ng
Published Jul 03, 2025
Tracked Since Feb 18, 2026