Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:41:07 +0000 CVE-2026-64946 — CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File Manager https://db.gcve.eu/vuln/cve-2026-64946 <p><strong>Affected:</strong> Pandora FMS</p> <p>A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator account takeover. This issue affects Pandora FMS: from 777 onwards.</p> <p><strong>Affected:</strong> Pandora FMS</p> <p>A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator account takeover. This issue affects Pandora FMS: from 777 onwards.</p> https://db.gcve.eu/vuln/cve-2026-64946