9.1Critical

CVE-2026-2750Command Injection via CLAPI generatetraps

Centreon Centreon Open Tickets on Central Server Published: (8 months ago)

Description

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04.

Weakness (CWE): CWE-20

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Centreon Centreon Open Tickets on Central Server all – < 25.10; 24.10;24.04
centreon web < 24.04.24

References and patches

CPE matches (NVD) (3)

  • cpe:2.3:a:centreon:web:*:*:*:*:*:*:*:* < 24.04.24
  • cpe:2.3:a:centreon:web:*:*:*:*:*:*:*:* ≥ 24.10.0 < 24.10.20
  • cpe:2.3:a:centreon:web:*:*:*:*:*:*:*:* ≥ 25.01.0 < 25.10.8