agentprime: centreon-infra-monitoringEvery new CVE for centreon-infra-monitoring.https://agentprime.io/CVE-2026-14453: A user with low privileges can inject SSTI templates that can lead to RCE in open-ticketshttps://agentprime.io/advisories/CVE-2026-14453/https://agentprime.io/advisories/CVE-2026-14453/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 08:19:13 GMTCVEcriticalCVE-2025-15029: An unauthenticated user is able to introduce SQL Injection using the Awie export modulehttps://agentprime.io/advisories/CVE-2025-15029/https://agentprime.io/advisories/CVE-2025-15029/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 14:34:02 GMTCVEcriticalCVE-2025-15026: Unauthenticated configuration import allows administrative account creation using AWIE componenthttps://agentprime.io/advisories/CVE-2025-15026/https://agentprime.io/advisories/CVE-2025-15026/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 14:31:34 GMTCVEcriticalCVE-2025-12511: A user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration pagehttps://agentprime.io/advisories/CVE-2025-12511/https://agentprime.io/advisories/CVE-2025-12511/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 14:05:52 GMTCVECVE-2025-12513: A user with elevated privileges can inject XSS in the Hosts configuration parameters pagehttps://agentprime.io/advisories/CVE-2025-12513/https://agentprime.io/advisories/CVE-2025-12513/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 13:43:42 GMTCVECVE-2025-12519: Information disclosure on Administration parameters API endpointhttps://agentprime.io/advisories/CVE-2025-12519/https://agentprime.io/advisories/CVE-2025-12519/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 10:15:08 GMTCVECVE-2025-13056: A user with elevated privileges can inject XSS in the Administration ACL Menus configuration pagehttps://agentprime.io/advisories/CVE-2025-13056/https://agentprime.io/advisories/CVE-2025-13056/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 10:10:35 GMTCVECVE-2025-5965: RCE via the backup feature available only to user with high privilegehttps://agentprime.io/advisories/CVE-2025-5965/https://agentprime.io/advisories/CVE-2025-5965/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.28 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jan 2026 10:06:05 GMTCVEcriticalCVE-2025-54890: A user with elevated privileges can inject XSS in the Hostgroups configuration pagehttps://agentprime.io/advisories/CVE-2025-54890/https://agentprime.io/advisories/CVE-2025-54890/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Dec 2025 11:07:28 GMTCVECVE-2025-8460: A user with elevated privileges can inject XSS in the Notification rules configuration pagehttps://agentprime.io/advisories/CVE-2025-8460/https://agentprime.io/advisories/CVE-2025-8460/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Dec 2025 10:55:58 GMTCVECVE-2025-10023: A user with elevated privileges can inject XSS in the Services Meta-services configuration pagehttps://agentprime.io/advisories/CVE-2025-10023/https://agentprime.io/advisories/CVE-2025-10023/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 15:07:21 GMTCVECVE-2025-8432: CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRONhttps://agentprime.io/advisories/CVE-2025-8432/https://agentprime.io/advisories/CVE-2025-8432/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 10:08:33 GMTCVECVE-2025-8459: A user with low privileges can inject XSS in the Monitoring Recurrent downtimes pagehttps://agentprime.io/advisories/CVE-2025-8459/https://agentprime.io/advisories/CVE-2025-8459/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 17:11:30 GMTCVECVE-2025-8430: A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration pagehttps://agentprime.io/advisories/CVE-2025-8430/https://agentprime.io/advisories/CVE-2025-8430/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 16:54:43 GMTCVECVE-2025-8429: A user with elevated privileges can inject XSS in the ACL Action access configuration pagehttps://agentprime.io/advisories/CVE-2025-8429/https://agentprime.io/advisories/CVE-2025-8429/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 15:29:56 GMTCVECVE-2025-54893: A user with elevated privileges can inject XSS in the Hosts templates configuration pagehttps://agentprime.io/advisories/CVE-2025-54893/https://agentprime.io/advisories/CVE-2025-54893/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 15:24:24 GMTCVECVE-2025-54891: A user with elevated privileges can inject XSS in the ACL Resource Access configuration pagehttps://agentprime.io/advisories/CVE-2025-54891/https://agentprime.io/advisories/CVE-2025-54891/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 15:07:01 GMTCVECVE-2025-54892: A user with elevated privileges can inject XSS in the SNMP traps group configuration pagehttps://agentprime.io/advisories/CVE-2025-54892/https://agentprime.io/advisories/CVE-2025-54892/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 14:59:10 GMTCVECVE-2025-54889: A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration pagehttps://agentprime.io/advisories/CVE-2025-54889/https://agentprime.io/advisories/CVE-2025-54889/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 14:54:31 GMTCVECVE-2025-5946: RCE via the poller reload feature available only to user with high privilegehttps://agentprime.io/advisories/CVE-2025-5946/https://agentprime.io/advisories/CVE-2025-5946/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 14:29:00 GMTCVEcriticalCVE-2025-8428: XSS found in the HTTP loader widgethttps://agentprime.io/advisories/CVE-2025-8428/https://agentprime.io/advisories/CVE-2025-8428/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 14:22:03 GMTCVE