Advisories · Technology

Centreon.

Every CVE that names Centreon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-11587 CVE record

CVSS 7.2 High

Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0
- Centreon
- SQL injection
Not analysed yet 29 Oct 2026
CVE-2025-12523 CVE record

CVSS 6.5 Medium

Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure
- Centreon
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2025-13050 CVE record

CVSS 5.4 Medium

Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users
- Centreon
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-2749 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Path traversal in Centreon Open Tickets
- Centreon
Not analysed yet 27 Feb 2026
CVE-2025-3872 CVE record

CVSS 7.2 High

Privilege escalation by altering payload in contact form
- Centreon
- SQL injection
Not analysed yet 24 Apr 2025
CVE-2024-5725 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability
- Centreon
- SQL injection
Not analysed yet 21 Aug 2024
CVE-2024-5723 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability
- Centreon
- SQL injection
Not analysed yet 21 Aug 2024
CVE-2023-51633 CVE record

CVSS 7.5 High

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability
- Centreon
- Cross-site scripting (XSS)
Not analysed yet 3 May 2024
CVE-2022-42429 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 29 Mar 2023
CVE-2022-42428 CVE record

CVSS 7.2 High

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 29 Mar 2023
CVE-2022-42427 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 29 Mar 2023
CVE-2022-42426 CVE record

CVSS 7.2 High

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 29 Mar 2023
CVE-2022-42425 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 29 Mar 2023
CVE-2022-42424 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 29 Mar 2023
CVE-2022-41142 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 26 Jan 2023
CVE-2022-34872 CVE record

CVSS 6.5 Medium

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 3 Aug 2022
CVE-2022-34871 CVE record

CVSS 7.2 High

SQL injection in Centreon
- Centreon
- SQL injection
Not analysed yet 3 Aug 2022
CVE-2012-5967 CVE record

Centreon: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in…
- Centreon
- Centreon web
Not analysed yet 19 Dec 2012