CVE-2025-34088

An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The net_tools.php functionality allows authenticated users to execute arbitrary OS commands via the select_ips parameter when performing network tools operations, such as pinging. This occurs because user input is not properly sanitized before being passed to system commands, enabling command injection.

• CWE-78

• https://github.com/pandorafms/pandorafmsProduct
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/pandora_ping_cmd_exec.rbExploit
• https://vulncheck.com/advisories/pandora-fms-rce-via-pingThird Party Advisory
• https://www.exploit-db.com/exploits/48334Exploit, VDB Entry
• https://www.rapid7.com/db/modules/exploit/linux/http/pandora_ping_cmd_exec/Third Party Advisory

Published

Jul 3, 2025

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34082A command injection vulnerability exists in IGEL OS versions…9.3
• CVE-2025-34083Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-34084Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-34085Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-34086Bolt CMS versions 3.7.0 and earlier contain a chain of vulne…8.8
• CVE-2025-34087An authenticated command injection vulnerability exists in P…8.8
• CVE-2025-34089An unauthenticated remote code execution vulnerability exist…9.3
• CVE-2025-3409A vulnerability classified as critical has been found in Not…8.8
• CVE-2025-34090Rejected reason: Neither filed by Chrome nor a valid securit…
• CVE-2025-34091Rejected reason: Neither filed by Chrome nor a valid securit…
• CVE-2025-34092Rejected reason: Neither filed by Chrome nor a valid securit…
• CVE-2025-34093An authenticated command injection vulnerability exists in t…7.5