SQL Injection Vulnerability in Centreon by Centreon
CVE-2026-11587

7.2HIGH

Key Information:

Vendor

Centreon

Status
Centreon
Vendor
CVE Published:
29 October 2026

What is CVE-2026-11587?

An SQL injection vulnerability exists in Centreon that allows an authenticated user with access to Access Control List (ACL) management privileges to read and modify the Centreon database. This flaw can potentially lead to unauthorized access and manipulation of essential data, posing a significant risk to the integrity of the application and its users.

Affected Version(s)

Centreon 25.10

Centreon 24.10

References

https://thewatch.centreon.comundefined
vendor-advisory
https://github.com/centreon/centreon/releases
release-notes

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vincent UNTZ
.