{"id":"CVE-2026-64950","published":"2026-10-01T10:17:16.367","lastModified":"2026-10-01T20:17:28.963","description":"Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}