CVE-2026-34190 — CSRF in Alert Command Deletion

CVE-2026-34190

CSRF in Alert Command Deletion PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.

Affected (CNA)

Vendor / product	Versions
Pandora FMS / Pandora FMS	affected 777

CWE

CWE-352

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.