CVE-2021-26804

6.5 mediumEPSS 1.2%

Medium (6.5) in centreon centreon web. EPSS 1.2% chance of exploitation in the next 30 days.

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

centreon:centreon_web

References

https://medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621
https://medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621

Check your stack JSON