CVE-2026-34186: SQL Injection in Custom Fields leads to Database Compromise
Published Apr 13, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800
Affected Software
2 affected components
Pandora FMS Pandora FMS>=777<=800
Artica Pandora FMS>=777<800.1
Remediation
Information
Fixed in v800.1 and v801 Pandora FMS versions
Event History
Apr 13, 2026
CVE Published
via MITRE·03:49 PM
Data Sourced
via MITRE·03:49 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-34186?
CVE-2026-34186 has a high severity rating due to its potential for database compromise through SQL Injection.
2
How do I fix CVE-2026-34186?
To fix CVE-2026-34186, update your Pandora FMS installation to a version higher than 800.
3
What versions of Pandora FMS are affected by CVE-2026-34186?
CVE-2026-34186 affects Pandora FMS versions from 777 through 800.
4
What type of vulnerability is CVE-2026-34186?
CVE-2026-34186 is an SQL Injection vulnerability related to improper handling of custom fields.
5
Can CVE-2026-34186 lead to data loss?
Yes, CVE-2026-34186 can lead to unauthorized access and potential data loss due to database compromise.