Threats tagged 'ghsa-m2m9-vhw3-w774'

CVE-2026-30805 is a critical vulnerability in Pandora FMS versions 777 through 800 involving insecure default initialization of a resource. This flaw allows an attacker to bypass authentication via API access, potentially leading to unauthorized access with high confidentiality and integrity impact. The vulnerability has a CVSS 3.1 score of 9.1, indicating critical severity. No known exploits are reported in the wild, and no patch or remediation details are currently provided.