CVE-2026-2751

9.8 criticalEPSS 0.3%

Critical (9.8) in centreon centreon web. EPSS 0.3% chance of exploitation in the next 30 days.

Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

centreon:centreon_web

References

https://https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504

Check your stack JSON