{"id":"CVE-2026-2751","aliases":["EUVD-2026-9026","GHSA-rfgr-cv32-cqmh"],"status":"published","title":"Blind SQL Injection","description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00309,"percentile":0.23985,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2026-02-27T13:33:44Z","modified":"2026-10-28T02:30:57Z","products":[{"vendor":"centreon","product":"centreon web on central server"},{"vendor":"centreon","product":"centreon_web"}],"references":[{"url":"https://https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504","tags":["Broken Link","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2751","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rfgr-cv32-cqmh"},{"url":"https://download.centreon.com","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2751.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-2751","title":"Blind SQL Injection","description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.","status":"published","published":"2026-02-27T13:33:44.787Z","modified":"2026-02-27T14:26:21.91Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T13:48:35.749498Z"}],"euvd":[{"id":"EUVD-2026-9026","description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.","status":"published","published":"2026-02-27T13:33:44Z","modified":"2026-02-27T14:26:21Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T19:48:14.049749Z"}],"ghsa":[{"id":"GHSA-rfgr-cv32-cqmh","title":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in...","description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.","status":"published","published":"2026-02-27T15:34:19Z","modified":"2026-02-27T15:34:20Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:06:24.663603Z"}],"nvd":[{"id":"CVE-2026-2751","description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.","status":"published","published":"2026-02-27T14:16:30.78Z","modified":"2026-06-17T10:31:39.42Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:12:07.420927Z"}],"osv":[{"id":"CVE-2026-2751","title":"Blind SQL Injection","description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.","status":"published","published":"2026-02-27T13:33:44.787Z","modified":"2026-10-28T02:30:57.488408976Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:45:00.180685Z"}]}}