CVE-2024-11320: Command Injection leading to RCE via LDAP Misconfiguration

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 91.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-11-21 · updated 2026-06-17
Weakness: CWE-77

Description

Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through <=777.4

Affected products

Artica PFMS Pandora FMS: from 700 before 777.5 — fixed in 777.5

How to fix

Upgrade to a fixed version: Artica PFMS Pandora FMS 777.5. Check the vendor advisory for mitigations.

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Get alerted when CVE-2024-11320 or the next vulnerability affects your stack