CVE-2026-75786

Description

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards.

References

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/