Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-13050 EUVD-2025-211212GHSA-g72r-v5vg-h84w

Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users

Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Centreon

Vendor: Centreon Product: Centreon

Description

Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user

Affected products

VendorProductAffectedFixed
Centreon Centreon 25.10 – < centreon-web-25.10.9, 24.10 – < centreon-web-24.10.21, 24.04 – < centreon-web-24.04.25 centreon-web-25.10.9

References