CVE-2026-34186

SQL Injection in Custom Fields leads to Database Compromise PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800

Affected (CNA)

Vendor / product	Versions
Pandora FMS / Pandora FMS	affected 777 through 800

CWE

CWE-89

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.