CVE-2025-5306: Command Injection in Netflow path
Published Jun 27, 2025
·Updated
Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through 778
Affected Software
2 affected components
Pandora FMS Pandora FMS>=774<=778
Artica Pandora FMS>=774<=778
Remediation
Information
Upgrade to version 777.10 or 780 or higher
Event History
Jun 27, 2025
CVE Published
via MITRE·07:48 AM
Data Sourced
via MITRE·07:48 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-5306?
The severity of CVE-2025-5306 is classified as high due to its potential for OS command injection.
2
How do I fix CVE-2025-5306?
To fix CVE-2025-5306, upgrade Pandora FMS to version 779 or later to mitigate the vulnerability.
3
What versions of Pandora FMS are affected by CVE-2025-5306?
CVE-2025-5306 affects Pandora FMS versions 774 through 778.
4
What is the impact of CVE-2025-5306 on my system?
The impact of CVE-2025-5306 includes the risk of unauthorized OS command execution on affected systems.
5
Is there a workaround for CVE-2025-5306?
There are no official workarounds for CVE-2025-5306; upgrading is the recommended solution.