{"id":"CVE-2026-2749","aliases":["EUVD-2026-9028","GHSA-p9c8-78v7-93hh"],"status":"published","title":"Path traversal in Centreon Open Tickets","description":"Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00631,"percentile":0.50708,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2026-02-27T15:05:17Z","modified":"2026-06-17T10:31:39Z","exploits":[{"source":"pocgithub","id":"hakaioffsec/Centreon-Exploits-2026","title":"hakaioffsec/Centreon-Exploits-2026","date":"2026-02-24","url":"https://github.com/hakaioffsec/Centreon-Exploits-2026"}],"products":[{"vendor":"centreon","product":"open_tickets"}],"references":[{"url":"https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2749-centreon-open-tickets-critical-severity-5493","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2749"},{"url":"https://github.com/advisories/GHSA-p9c8-78v7-93hh"}],"sources":{"cve":[{"id":"CVE-2026-2749","title":"Path traversal in Centreon Open Tickets","description":"Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.","status":"published","published":"2026-02-27T15:05:17.203Z","modified":"2026-03-06T15:31:59.884Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T13:48:35.749498Z"}],"euvd":[{"id":"EUVD-2026-9028","description":"Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.","status":"published","published":"2026-02-27T15:05:17Z","modified":"2026-03-06T15:31:59Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:08.258323Z"}],"ghsa":[{"id":"GHSA-p9c8-78v7-93hh","title":"Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket...","description":"Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.","status":"published","published":"2026-02-27T18:31:05Z","modified":"2026-03-23T18:30:26Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:06:48.355489Z"}],"nvd":[{"id":"CVE-2026-2749","description":"Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.","status":"published","published":"2026-02-27T16:16:25.7Z","modified":"2026-06-17T10:31:39.193Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:12:07.420927Z"}]}}