Skip to content
OpenAdvisories

Vendor

Centreon

55 known vulnerabilities.

Products

Centreon 23 Infra Monitoring 21 web 6 Centreon Open Tickets on Central Server 2 Centreon BAM 1 Centreon web 1 Centreon Web on Central Server 1 Infra Monitoring - Open-tickets 1
All Critical High Medium Low Exploited only Public exploit

31 results · Clear filters · Feed

  • High 7.2
    CVE-2026-11587

    Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0

    SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

    Centreon Centreon
  • High 8.3
    CVE-2026-2751

    Blind SQL Injection

    Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server befo…

    Centreon Centreon Web on Central Server
  • High 7.2
    CVE-2025-5965 EPSS 28%

    RCE via the backup feature available only to user with high privilege

    In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup …

    Centreon Infra Monitoring
  • High 7.2
    CVE-2025-12514

    A user with elevated privileges is able to introduce a SQL Injection using the Open-tickets Notification rules configuration parameters

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring - Open-tickets (Notification rules configuration parameters, Open tickets modules) allows SQL Injection to user with elevated privi…

    Centreon Infra Monitoring - Open-tickets
  • High 8.4
    CVE-2025-8432

    CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON

    Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 2…

    Centreon Infra Monitoring
  • High 7.7
    CVE-2025-8459

    A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring recurrent downtime scheduler modules) allows Stored XSS.This issue affects Infra Monitoring: from 24.10.0 before…

    Centreon Infra Monitoring
  • High 7.2
    CVE-2025-5946 Public exploit EPSS 14%

    RCE via the poller reload feature available only to user with high privilege

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection. On the poller parameters page, a user with hi…

    Centreon Infra Monitoring
  • High 8.8
    CVE-2025-6791

    Second order SQL injection available to user with low privilege

    In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon web (Monitoring even…

    Centreon web
  • High 7.2
    CVE-2025-4650

    User with high privileges is able to introduce a SQLi using the Meta Service indicator page

    User with high privileges is able to introduce a SQLi using the Meta Service indicator page. Caused by an Improper Neutralization of Special Elements used in an SQL Command.This issue affects web: from 24.10.0 before 24.10.9, from 24.04.0 before 24.04.16, fro…

    Centreon web
  • High 8.4
    CVE-2025-4648

    A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.

    The content of a SVG file, received as input in Centreon web, was not properly checked. Allows Reflected XSS. A user with elevated privileges can inject JS script by altering the content of a SVG media, during the submit request. This issue affects web: from …

    Centreon web
  • High 8.4
    CVE-2025-4647

    A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon web allows Reflected XSS. A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG. This …

    Centreon web
  • High 7.2
    CVE-2025-4646

    A high privilege user is able to create and use a valid admin API token in centreon-web

    Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.

    Centreon web
  • High 7.2
    CVE-2025-3872

    Privilege escalation by altering payload in contact form

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection. A user with high privileges is able to become administrator by intercepting the…

    Centreon Centreon
  • High 7.2
    CVE-2025-3767

    SQL Injection in Centreon BAM boolean KPI listing

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects…

    Centreon Centreon BAM
  • High 8.8
    CVE-2024-5725 EPSS 47%

    Centreon initCurveList SQL Injection Remote Code Execution Vulnerability

    Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw e…

    Centreon Centreon
  • High 8.8
    CVE-2024-5723 EPSS 41%

    Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

    Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fl…

    Centreon Centreon
  • High 7.5
    CVE-2023-51633

    Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability

    Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. User interaction is required to exploit this vulnerability. The specific fla…

    Centreon Centreon
  • High 8.8
    CVE-2024-23119

    Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability

    Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific …

    Centreon Centreon centreon/centreon Packagist
  • High 7.2
    CVE-2024-23118 EPSS 53%

    Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

    Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The spe…

    Centreon Centreon centreon/centreon Packagist
  • High 7.2
    CVE-2024-23117 EPSS 53%

    Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

    Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The …

    Centreon Centreon centreon/centreon Packagist
  • High 7.2
    CVE-2024-23116 EPSS 53%

    Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

    Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fl…

    Centreon Centreon centreon/centreon Packagist
  • High 7.2
    CVE-2024-23115 EPSS 67%

    Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

    Centreon updateGroups SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw ex…

    Centreon Centreon centreon/centreon Packagist
  • High 8.8
    CVE-2024-0637 EPSS 72%

    Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

    Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw…

    Centreon Centreon centreon/centreon Packagist
  • High 7.2
    CVE-2022-42424 EPSS 76%

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 7.2
    CVE-2022-42427 EPSS 76%

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 7.2
    CVE-2022-42426

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 7.2
    CVE-2022-42428

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 7.2
    CVE-2022-42425 EPSS 76%

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 7.2
    CVE-2022-42429 EPSS 76%

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 7.2
    CVE-2022-41142 EPSS 85%

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon
  • High 7.2
    CVE-2022-34871

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…

    Centreon Centreon