CVE-2026-30804: Unrestricted File Upload in Extension Uploader leads to Remote Code Execution
Published Apr 13, 2026
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800
Affected Software
2 affected components
Pandora FMS Pandora FMS>=777<=800
Artica Pandora FMS>=777<800.1
Remediation
Information
Fixed in v800.1 and v801 Pandora FMS versions
Event History
Apr 13, 2026
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30804?
CVE-2026-30804 is classified as a critical vulnerability due to its potential for Remote Code Execution.
2
How do I fix CVE-2026-30804?
To mitigate CVE-2026-30804, update Pandora FMS to a version higher than 800 or apply relevant security patches provided by the vendor.
3
What kind of attack does CVE-2026-30804 allow?
CVE-2026-30804 allows attackers to perform Remote Code Execution through the unrestricted upload of dangerous file types.
4
Which versions of Pandora FMS are affected by CVE-2026-30804?
CVE-2026-30804 affects Pandora FMS versions from 777 through 800.
5
What are the risks associated with CVE-2026-30804?
The risks associated with CVE-2026-30804 include unauthorized access, data loss, and complete system compromise due to Remote Code Execution.