Vulnerability in Centreon Open Tickets on Central Server for Linux
CVE-2026-2749

9.9CRITICAL

Key Information:

Vendor

Centreon

Status
Vendor
CVE Published:
27 February 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-2749?

This vulnerability affects the Centreon Open Tickets module on Central Server systems running Linux. It impacts several versions released before 25.10.3, 24.10.8, and 24.04.7, potentially allowing unauthorized access or control over critical ticketing functionalities. Administrators are urged to evaluate their systems for compliance and implement necessary patches to enhance security and mitigate risks. For detailed information, refer to the latest security bulletins.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Centreon-Exploits-2026
Created by hakaioffsec

References

https://thewatch.centreon.com/latest-security-bulletins-6...

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

Credit

Texugo from Hakaï Security
.