High severityNVD Advisory· Published Oct 1, 2026

CVE-2026-64950

Description

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards.

Affected products

Pandora FMS/File Managerllm-create
Range: >=777
Pandora FMS/Pandora FMSllm-create
Range: >=777

Patches

Vulnerability mechanics

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000