CVE-2026-64950 — Stored Cross-Site Scripting via Directory Name in File Manager Create Directory

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pa…

Published: 2026-10-01 · CVSS: 8.4 · CVSS 4.0

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7