7.2Hoch
CVE-2026-11587Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0
Beschreibung
SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database
Schwachstellentyp (CWE):
CWE-89
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://thewatch.centreon.comundefined vendor-advisory
- https://github.com/centreon/centreon/releases release-notes