CVE-2026-34188: OS Command Injection in Event Response Execution
Published Apr 13, 2026
·Updated
Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800
Affected Software
2 affected components
Pandora FMS Pandora FMS>=777<=800
Artica Pandora FMS>=777<800.1
Remediation
Information
Fixed in v800.1 and v801 Pandora FMS versions
Event History
Apr 13, 2026
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-34188?
CVE-2026-34188 is categorized as a critical vulnerability due to the potential for OS command injection.
2
How do I fix CVE-2026-34188?
To resolve CVE-2026-34188, update your Pandora FMS installation to a version beyond 800.
3
What products are affected by CVE-2026-34188?
CVE-2026-34188 affects Pandora FMS versions from 777 to 800.
4
What are the potential impacts of exploiting CVE-2026-34188?
Exploiting CVE-2026-34188 can allow an attacker to execute arbitrary OS commands on the system.
5
Is there a workaround for CVE-2026-34188?
Currently, the only effective workaround for CVE-2026-34188 is to upgrade to the latest version of Pandora FMS.