Which versions of Pandora Fms are affected by CVE-2026-30811?

Pandora FMS versions 777-800 contain an authorization bypass allowing authenticated users to access configuration endpoints beyond their privilege level, exposing credentials and system architecture…

How to fix or mitigate CVE-2026-30811?

Within 24 hours: Identify all Pandora FMS instances (versions 777-800) in production via asset inventory and vulnerability scanner; isolate or restrict network access to configuration endpoints if possible. Within 7 days: Contact Pandora FMS vendor for patch availability and timeline; implement network segmentation to limit authenticated user access to configuration APIs. Within 30 days: Apply vendor-released patch immediately upon availability; conduct audit of configuration endpoint access logs for unauthorized access; reset exposed credentials and review role-based access control (RBAC) configuration across all instances.

Pandora Fms CVE-2026-30811

Q: What is the CVSS score of CVE-2026-30811?

CVE-2026-30811 has a CVSS 4.0 base score of 8.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber. EPSS exploitation probability: 0.0%.

EUVD-2026-21992 HIGH

Incorrect Default Permissions (CWE-276)

2026-04-13 PandoraFMS

Privilege Escalation Pandora Fms

8.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 17, 2026 - 15:52 vuln.today

cvss_changed

Analysis Generated

Apr 13, 2026 - 16:43 vuln.today

CVSS changed

Apr 13, 2026 - 16:22 NVD

8.4 (HIGH)

EUVD ID Assigned

Apr 13, 2026 - 16:15 euvd

EUVD-2026-21992

Analysis Generated

Apr 13, 2026 - 16:15 vuln.today

CVE Published

Apr 13, 2026 - 15:47 nvd

HIGH 8.4

DescriptionCVE.org

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800

AnalysisAI

Unauthorized access to configuration endpoints in Pandora FMS versions 777 through 800 exposes sensitive system information to low-privileged authenticated users. The missing authorization control (CWE-276) allows privilege escalation where authenticated users can access configuration data they should not have permissions to view, potentially revealing credentials, internal architecture details, and security settings. With CVSS 8.4 (High) and low attack complexity, this vulnerability poses significant risk in multi-tenant or role-separated Pandora FMS deployments. No public exploit identified at time of analysis, though the straightforward attack vector (network-accessible, low complexity, requires only basic authentication) makes exploitation highly feasible.

Technical ContextAI

Pandora FMS is an open-source network monitoring and management platform. This vulnerability stems from improper privilege management (CWE-276 - Incorrect Default Permissions) in configuration endpoints exposed over the network. The CVSS 4.0 vector indicates network-accessible attack surface (AV:N) requiring low-privileged authentication (PR:L) with no user interaction (UI:N). The vulnerability allows authenticated users to bypass intended authorization controls and access configuration data they should not have permissions to view. The subsequent system impact is rated high for availability (SA:H), suggesting exposed configuration could enable further attacks affecting system stability. The attack requires minimal technical sophistication (AC:L, AT:N) and affects the confidentiality of both the vulnerable system (VC:H) and subsequent systems (SC:L), indicating potential lateral movement or downstream impact through exposed credentials or architectural information.

RemediationAI

Organizations should immediately upgrade Pandora FMS to the latest version beyond 800 that addresses this authorization bypass. Consult the official Pandora FMS security advisory at https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ for specific patched version information and upgrade instructions. As interim mitigation until patching, implement network-level access controls to restrict configuration endpoint access to only authorized administrator IP addresses or network segments. Review user privilege assignments to ensure principle of least privilege, removing unnecessary accounts and downgrading user permissions where possible. Audit access logs for suspicious configuration endpoint access by low-privileged users that may indicate prior exploitation. After patching, rotate any credentials or secrets that may have been exposed through unauthorized configuration access.