Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Centreon — Vulnerabilities & Security Advisories 24

All 24 CVE vulnerabilities found in Centreon, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting Centreon, the open-source monitoring platform developed by the Centreon vendor. The collection encompasses a broad spectrum of vulnerability types, including remote code execution, privilege escalation, and information disclosure flaws, spanning from the product's initial public release through the most recent security advisories. Visitors can utilize this resource to track the vendor's official security bulletins, analyze the prevalence and impact of specific weakness classes within the monitoring ecosystem, or review the complete historical record of security issues associated with the Centreon software. The data presented here is derived from public disclosures and standardized vulnerability databases to provide a comprehensive overview of the platform's security posture over time. Users seeking to assess risk or plan remediation strategies will find detailed descriptions of affected components and the nature of the reported defects. This compilation serves as a central reference point for security professionals, system administrators, and developers responsible for maintaining Centreon installations. By consolidating scattered reports into a single view, the page facilitates efficient identification of relevant threats without requiring navigation across multiple disparate sources.

Vendor: Centreon

CVE ID Title CVSS Severity Published
CVE-2026-11587 Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0 CWE-89 7.2 High 2026-10-29
CVE-2025-12523 Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure CWE-862 6.5 Medium 2026-10-29
CVE-2025-13050 Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users CWE-863 5.4 Medium 2026-10-29
CVE-2025-3872 Privilege escalation by altering payload in contact form CWE-89 7.2 High 2025-04-24
CVE-2024-5725 Centreon initCurveList SQL Injection Remote Code Execution Vulnerability CWE-89 8.8AI High AI 2024-08-21
CVE-2024-5723 Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability CWE-89 8.8AI High AI 2024-08-21
CVE-2023-51633 Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability CWE-79 8.8 - 2024-05-03
CVE-2024-23119 Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability CWE-89 8.8 - 2024-04-01
CVE-2024-23118 Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability CWE-89 8.8 - 2024-04-01
CVE-2024-23117 Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability CWE-89 8.8 - 2024-04-01
CVE-2024-23116 Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability CWE-89 8.8 - 2024-04-01
CVE-2024-23115 Centreon updateGroups SQL Injection Remote Code Execution Vulnerability CWE-89 8.8 - 2024-04-01
CVE-2024-0637 Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability CWE-89 8.8 - 2024-04-01
CVE-2022-42429 Centreon SQL注入漏洞 CWE-89 8.8 - 2023-03-29
CVE-2022-42428 Centreon SQL注入漏洞 CWE-89 8.8 - 2023-03-29
CVE-2022-42427 Centreon SQL注入漏洞 CWE-89 8.8 - 2023-03-29
CVE-2022-42426 Centreon SQL注入漏洞 CWE-89 8.8 - 2023-03-29
CVE-2022-42425 Centreon SQL注入漏洞 CWE-89 8.8 - 2023-03-29
CVE-2022-42424 Centreon SQL注入漏洞 CWE-89 8.8 - 2023-03-29
CVE-2022-41142 Centreon SQL注入漏洞 CWE-89 8.8 - 2023-01-26
CVE-2022-3827 centreon Contact Groups Form formContactGroup.php sql injection CWE-707 6.3 Medium 2022-11-02
CVE-2022-34872 Centreon SQL注入漏洞 CWE-89 6.5 - 2022-08-03
CVE-2022-34871 Centreon SQL注入漏洞 CWE-89 8.8 - 2022-08-03
CVE-2012-5967 Centreon SQL注入漏洞 8.8 - 2012-12-19

All 24 known CVE vulnerabilities affecting Centreon with full Chinese analysis, references, and POCs where available.