CVE-2026-30809: OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution
Published Apr 13, 2026
·Updated
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800
Affected Software
2 affected components
Pandora FMS Pandora FMS>=777<=800
Artica Pandora FMS>=777<800.1
Remediation
Information
Fixed in v800.1 and v801 Pandora FMS versions
Event History
Apr 13, 2026
CVE Published
via MITRE·03:46 PM
Data Sourced
via MITRE·03:46 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30809?
CVE-2026-30809 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2026-30809?
To fix CVE-2026-30809, upgrade Pandora FMS to a version higher than 800.
3
What systems are affected by CVE-2026-30809?
CVE-2026-30809 affects Pandora FMS versions from 777 to 800.
4
What type of vulnerability is CVE-2026-30809?
CVE-2026-30809 is an OS Command Injection vulnerability caused by a blacklist bypass.
5
Can CVE-2026-30809 lead to data breaches?
Yes, CVE-2026-30809 can potentially lead to unauthorized access and data breaches through remote code execution.