Centreon Infra Monitoring vulnerabilities

CVEs per yearBy the year they were published

1. 202513
2. 20268

Newest CVEs

• CVE-2026-14453

  A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets

  Centreon · Infra Monitoring

  Critical9.6
• CVE-2025-15029

  An unauthenticated user is able to introduce SQL Injection using the Awie export module

  Centreon · Infra Monitoring

  Critical9.8
• CVE-2025-15026

  Unauthenticated configuration import allows administrative account creation using AWIE component

  Centreon · Infra Monitoring

  Critical9.8
• CVE-2025-12511

  A user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration page

  Centreon · Infra Monitoring

  Medium6.8
• CVE-2025-12513

  A user with elevated privileges can inject XSS in the Hosts configuration parameters page

  Centreon · Infra Monitoring

  Medium6.8
• CVE-2025-12519

  Information disclosure on Administration parameters API endpoint

  Centreon · Infra Monitoring

  Medium5.3
• CVE-2025-13056

  A user with elevated privileges can inject XSS in the Administration ACL Menus configuration page

  Centreon · Infra Monitoring

  Medium6.8
• CVE-2025-5965

  RCE via the backup feature available only to user with high privilege

  Centreon · Infra Monitoring

  High7.2
• CVE-2025-54890

  A user with elevated privileges can inject XSS in the Hostgroups configuration page

  Centreon · Infra Monitoring

  Medium6.8
• CVE-2025-8460

  A user with elevated privileges can inject XSS in the Notification rules configuration page

  Centreon · Infra Monitoring

  Medium6.8