CVE-2026-34190 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-352	Cross-Site Request Forgery The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

참고 자료

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/