CVE-2026-64949 : 詳細

CVE-2026-64949

2026-10-01
10h17 +00:00
File Inclusion
A04-Insecure Design
2026-10-01
20h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

参考資料