Skip to contentCentreon Infra Monitoring vulnerabilities
- centreon infra monitoringA user with low privileges can inject SSTI templates that can lead to RCE in open-ticketsCVE-2026-144539.6 Critical
- centreon awie, infra monitoring +1 moreAn unauthenticated user is able to introduce SQL Injection using the Awie export moduleCVE-2025-15029EPSS 13.0%9.8 Critical
- centreon awie, infra monitoring +1 moreUnauthenticated configuration import allows administrative account creation using AWIE componentCVE-2025-150269.8 Critical
- centreon infra monitoring, dynamic service management +1 moreA user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration pageCVE-2025-125116.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Hosts configuration parameters pageCVE-2025-125136.8 Medium
- centreon infra monitoring, web +1 moreInformation disclosure on Administration parameters API endpointCVE-2025-125195.3 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Administration ACL Menus configuration pageCVE-2025-130566.8 Medium
- centreon infra monitoring, web +1 moreRCE via the backup feature available only to user with high privilegeCVE-2025-5965EPSS 28.2%7.2 High
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Hostgroups configuration pageCVE-2025-548906.8 Medium
- centreon infra monitoring - open-tickets, open tickets +1 moreA user with elevated privileges is able to introduce a SQL Injection using the Open-tickets Notification rules configuration parametersCVE-2025-125147.2 High
- centreon infra monitoring, open tickets +1 moreA user with elevated privileges can inject XSS in the Notification rules configuration pageCVE-2025-84606.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Services Meta-services configuration pageCVE-2025-100236.2 Medium
- centreon infra monitoringCentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRONCVE-2025-84328.4 High
- centreon web, infra monitoring +1 moreA user with low privileges can inject XSS in the Monitoring Recurrent downtimes pageCVE-2025-84597.7 High
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Commands Connectors configuration configuration pageCVE-2025-84306.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the ACL Action access configuration pageCVE-2025-84296.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Hosts templates configuration pageCVE-2025-548936.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the ACL Resource Access configuration pageCVE-2025-548916.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the SNMP traps group configuration pageCVE-2025-548926.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration pageCVE-2025-548896.8 Medium
- centreon infra monitoring, web +1 moreRCE via the poller reload feature available only to user with high privilegeCVE-2025-5946Public exploitEPSS 13.5%7.2 High
- centreon web, infra monitoring +1 moreXSS found in the HTTP loader widgetCVE-2025-84286.8 Medium