CVE-2026-2751
High
Description
Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.
SeverityHigh
CVSS8.3
Exploit probability—
ProductCentreon Web
PublishedFeb 27, 2026
First seenFeb 27, 2026
Weakness typeCWE-89SQL injection
How to fix
Update
- centreon centreon_web24.04.24., 24.10.20, 25.10.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| centreon centreon_web | 24.04.0 ≤ v < 24.04.24., 24.10.0 ≤ v < 24.10.20, 25.10.0 ≤ v < 25.10.8 | 24.04.24., 24.10.20, 25.10.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.