by Kastro
Paper/Archive/CVE-2026-2751

CVE-2026-2751

Centreon Centreon Web on Central Server — Blind SQL Injection

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
34
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 23.7.237 × 204.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.

Affected

ProductAffectedFixed inSource
Centreon Web on Central Server25.10; 24.10;24.04 – < 25.10.8, 24.10.20, 24.04.2425.10.8, 24.10.20, 24.04.24CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Centreon (CNA)8.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refhttps://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504