CVE-2024-35307

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through <777.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

No affected versions have been published.

Timeline

Published: Jun 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-353088.8A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pand CVE-2024-35316.1A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects s CVE-2024-353113.3Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 hav CVE-2024-353126.2In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 (with lite vanguards), aka TROVE-2024-003.CVE-2024-353137.3In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 (with full vanguards), aka TROVE-2024-004.CVE-2024-353149.8A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.2 CVE-2024-353155.6A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.2 CVE-2024-35326.1A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Affected is an unknown CVE-2024-353214.3MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parameter.CVE-2024-353226.1MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.CVE-2024-353249.8Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.CVE-2024-35336.1A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerabili