{"id":"CVE-2026-64949","published":"2026-10-01T10:17:16.207","lastModified":"2026-10-01T20:17:28.810","description":"Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-434"],"vendors":[],"products":[],"references":[{"url":"https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}