Percona Monitoring And Management — known CVE vulnerabilities

Every CVE whose affected-product data names Percona Monitoring And Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-25212 — CVSS 9.9 (critical): An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker…
• CVE-2023-34409 — CVSS 9.8 (critical): In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly…
• CVE-2020-7920 — CVSS 7.5 (high): pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.