CVE-2026-30805 — VulnIntel

CVE-2026-30805

CRITICAL

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800

StatusAnalyzed

설명

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800

Score Summary

CVSS Score: 9.1
Version: 4.0
VPI: 91
Why this VPI (explainable, experimental)
VPI breakdown
Impact 91.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 91.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 26.3%)
Attack Vector: Network
High Complexity
No Privileges
No User Interaction

Details

Published: 05/12/2026(2 months ago)
Modified: 05/13/2026(2 months ago)
Source: NVD
Products: 1

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	05/13/2026
NVDNIST	4.0	9.1

CWE Weakness Classification

CWE-1188
NVD
Secondary

References (1)

NVD
Advisory
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Affected Products (1)

Impact	91.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	91.00