← CVE Intelligence

CVE-2026-64948

Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure PUBLISHED

Description (CNA)

Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards.

Affected (CNA)

Vendor / productVersions
Pandora FMS / Pandora FMSaffected 777

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.