CVE-2026-75786

SQL Injection in Grafana Integration Endpoint (query.php) PUBLISHED

Description (CNA)

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards.

Affected (CNA)

Vendor / product	Versions
Pandora FMS / Pandora FMS	affected 777

CWE

CWE-89

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.