CVE-2026-30812

MEDIUM 5.4CVE-2026-30812 · Published 13/04/2026 · updated 17/06/2026

In short

CVE-2026-30812 is a MEDIUM (CVSS 5.4) vulnerability affecting pandora fms (artica).
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.4% of all vulnerabilities.
Fix: update to 800.1 or later.

Package	Affected versions	Patched versions
pandora fms artica	`≥ 777, < 800.1`	`800.1`

Description

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures · Vendor Advisory

More vulnerabilities in pandora fms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pandora fms

artica

≥ 777, < 800.1

800.1

More vulnerabilities in pandora fms

See all →