CVE-2026-64950 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-79	Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

참고 자료

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/