OS Command Injection Vulnerability in Centreon Web Application
CVE-2025-5945
What is CVE-2025-5945?
An OS Command Injection vulnerability in the Centreon web application’s backup configuration modules poses significant security risks. This flaw allows remote attackers to execute arbitrary commands on the server by exploiting improper neutralization of special elements during command processing. Users of Centreon cloud version 25.03 and previous versions before 24.10.9, 24.04.15, and 23.10.24 are particularly vulnerable. Immediate action is recommended to secure affected systems and mitigate potential exploitation risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
centreon-web Cloud 25.03
centreon-web Cloud 25.03
centreon-web self-hosted 24.10.0 < 24.10.9
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
