CVE-2026-30809

OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800

Affected (CNA)

Vendor / product	Versions
Pandora FMS / Pandora FMS	affected 777 through 800

CWE

CWE-78

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.