CVE-2026-64948 — Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosure

Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards.

Published: 2026-10-01 · CVSS: 7.1 · CVSS 4.0

Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7