Skip to content
OpenAdvisories

Vendor

Centreon

55 known vulnerabilities.

Products

Centreon 23 Infra Monitoring 21 web 6 Centreon Open Tickets on Central Server 2 Centreon BAM 1 Centreon web 1 Centreon Web on Central Server 1 Infra Monitoring - Open-tickets 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-14453

    A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets

    This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message_confirm field is stored without sanitization and rendered via Smarty with no security policy ena…

    Centreon Infra Monitoring
  • Critical 9.9
    CVE-2026-2749 Public exploit

    Path traversal in Centreon Open Tickets

    Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.

    Centreon Centreon Open Tickets on Central Server
  • Critical 9.1
    CVE-2026-2750

    Command Injection via CLAPI generatetraps

    Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04.

    Centreon Centreon Open Tickets on Central Server
  • Critical 9.8
    CVE-2025-15029 EPSS 13%

    An unauthenticated user is able to introduce SQL Injection using the Awie export module

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.…

    Centreon Infra Monitoring
  • Critical 9.8
    CVE-2025-15026

    Unauthenticated configuration import allows administrative account creation using AWIE component

    Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from …

    Centreon Infra Monitoring