CVE-2026-34189 — CSRF in Event Response Deletion

CVE-2026-34189

CSRF in Event Response Deletion PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.

Affected (CNA)

Vendor / product	Versions
Pandora FMS / Pandora FMS	affected 777

CWE

CWE-352

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.