What’s Vulnerable › Vulnerabilities
CVE-2026-2751: Blind SQL Injection
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-27 · updated 2026-06-17
- Weakness: CWE-89
Description
Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.
Affected products
- Centreon: from 24.04.0 before 24.04.24.; from 24.10.0 before 24.10.20; from 25.10.0 before 25.10.8 — fixed in 24.04.24., 24.10.20, 25.10.8
How to fix
Upgrade to a fixed version: Centreon 24.04.24., 24.10.20, 25.10.8. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-2751 or the next vulnerability affects your stack