Is CVE-2026-30811 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-30811 being exploited in the wild.

How severe is CVE-2026-30811?

Medium severity, with a CVSS score of 6.5, published 13 April 2026.

Which products and versions are affected?

Artica PFMS Pandora FMS 777 through 800.

Is there a fix for CVE-2026-30811?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-30811 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-30811?

Check whether you run Artica Pandora Fms. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-30811: Artica Pandora FMS Sensitive Information Exposure in configuration endpoint

CVE-2026-30811 · Severity: medium · CVSS 6.5 · Published 2026-04-13

Pandora FMS, a monitoring and management platform, contains a security vulnerability in its configuration interface. An authenticated user with low-level access can bypass authorization checks to view sensitive system information. This could lead to the exposure of internal configuration details that should be restricted to administrators.

Technologies: Artica Pandora Fms. Vendors: Artica.

Quick answers

Is CVE-2026-30811 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-30811 being exploited in the wild.
How severe is CVE-2026-30811?: Medium severity, with a CVSS score of 6.5, published 13 April 2026.
Which products and versions are affected?: Artica PFMS Pandora FMS 777 through 800.
Is there a fix for CVE-2026-30811?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-30811 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-30811?: Check whether you run Artica Pandora Fms. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Missing Authorization vulnerability (CWE-276/CWE-862) exists in Pandora FMS versions 777 through 800. The flaw is located within a configuration endpoint that fails to properly validate user permissions before displaying data. An attacker with a low-privileged account can access this endpoint over the network to retrieve sensitive configuration information. The vulnerability has been addressed in version 800.1. CVSS 3.1 scoring indicates a base score of 6.5, primarily impacting confidentiality.

Affected products

Artica PFMS Pandora FMS 777 through 800

Timeline

2026-04-13: disclosed: Initial disclosure by Artica PFMS
2026-04-13: advisory: NVD published date
2026-04-22: other: NVD analysis and enrichment completed

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.