CVE-2026-34189

UNKNOWN 0.0

CSRF in Event Response Deletion

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.

CWE	CWE-352
Vendor	pandora fms
Product	pandora fms
Published	Oct 1, 2026

Stay Ahead of the Next One

Get instant alerts for pandora fms pandora fms

Be the first to know when new unknown vulnerabilities affecting pandora fms pandora fms are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Pandora FMS / Pandora FMS

777

References

NVD ↗ CVE.org ↗ EPSS Data ↗

pandorafms.com: https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Credits

Gaurish Kauthankar (Argon21) & Mr. Omkar Naik