CVE-2026-30806: OS Command Injection in Network Report leads to Remote Code Execution
Published Apr 13, 2026
·Updated
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pandora FMS: from 777 through 800
Affected Software
2 affected components
Pandora FMS Pandora FMS>=777<=800
Artica Pandora FMS>=777<800.1
Remediation
Information
Fixed in v800.1 and v801 Pandora FMS versions
Event History
Apr 13, 2026
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30806?
CVE-2026-30806 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2026-30806?
To mitigate CVE-2026-30806, update Pandora FMS to the latest version beyond 800 to eliminate the OS command injection risk.
3
Which versions of Pandora FMS are affected by CVE-2026-30806?
CVE-2026-30806 affects Pandora FMS versions from 777 to 800.
4
What type of vulnerability is CVE-2026-30806?
CVE-2026-30806 is an OS command injection vulnerability that allows attackers to execute arbitrary commands on the server.
5
What are the potential impacts of CVE-2026-30806?
The impacts of CVE-2026-30806 include possible unauthorized access and control over affected systems, leading to compromise of sensitive data.