CVE-2026-64950 - Stored Cross-Site Scripting via Directory Name in File Manager Create Directory
CVE ID :CVE-2026-64950 Published : Oct. 1, 2026, 10:17 a.m. | 1 hour ago Description :Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards. ...