CVE-2026-2751

Blind SQL Injection

CVSS 8.3 HIGHEPSS 0.3%CWE-89

Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Affected products

Centreon · Centreon Web on Central Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504