centreon Vulnerability Advisory Catalog

Total 124 security vulnerabilities recorded for centreon software and firmware.

← Back to All Vendors
CVE-2026-2750 CRITICAL
Component: web

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affect...

📅 2026-02-27
CVSS 9.1 Dossier →
CVE-2026-2749 CRITICAL
Component: open_tickets

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on ...

📅 2026-02-27
CVSS 9.9 Dossier →
Component: centreon_web

Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Se...

📅 2026-02-27
CVSS 8.3 Dossier →
CVE-2025-15029 CRITICAL
Component: awie

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) ...

📅 2026-01-05
CVSS 9.8 Dossier →
CVE-2025-15026 CRITICAL
Component: awie

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functional...

📅 2026-01-05
CVSS 9.8 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts configur...

📅 2026-01-05
CVSS 6.8 Dossier →
Component: dynamic_service_management

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (DSM extenstio ...

📅 2026-01-05
CVSS 6.8 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Administration...

📅 2026-01-05
CVSS 6.8 Dossier →
Component: centreon_web

Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not P...

📅 2026-01-05
CVSS 5.3 Dossier →
Component: centreon_web

In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Specia...

📅 2026-01-05
CVSS 7.2 Dossier →
CVE-2025-8460 MEDIUM
Component: open_tickets

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Notification r...

📅 2025-12-22
CVSS 6.8 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hostgroup conf...

📅 2025-12-22
CVSS 6.8 Dossier →
Component: open_tickets

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring - Open-tickets (Notifi...

📅 2025-12-22
CVSS 7.2 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Services Meta-...

📅 2025-10-27
CVSS 6.2 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring rec...

📅 2025-10-14
CVSS 7.7 Dossier →
CVE-2025-8430 MEDIUM
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Commands Conne...

📅 2025-10-14
CVSS 6.8 Dossier →
CVE-2025-8429 MEDIUM
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Action acc...

📅 2025-10-14
CVSS 6.8 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts template...

📅 2025-10-14
CVSS 6.8 Dossier →
CVE-2025-8428 MEDIUM
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (HTTP Loader wi...

📅 2025-10-14
CVSS 6.8 Dossier →
Component: centreon_web

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload s...

📅 2025-10-14
CVSS 7.2 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps gro...

📅 2025-10-14
CVSS 6.8 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Resource a...

📅 2025-10-14
CVSS 6.8 Dossier →
Component: centreon_web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps man...

📅 2025-10-14
CVSS 6.8 Dossier →
Component: centreon_web

In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neutralizatio...

📅 2025-08-22
CVSS 8.8 Dossier →
Page 1 of 6 (124 Total Records)