Blind SQL Injection Vulnerability in Centreon Web on Linux Servers
CVE-2026-2751

8.3HIGH

Key Information:

Vendor

Centreon

Status
Centreon Web On Central Server
Vendor
CVE Published:
27 February 2026

What is CVE-2026-2751?

A Blind SQL Injection vulnerability has been identified in Centreon Web on Central Servers running on Linux, particularly affecting the Service Dependencies modules. This flaw arises from unsanitized array keys used during the deletion process, enabling attackers to execute arbitrary SQL queries and potentially gain unauthorized access to sensitive data. The impact of this vulnerability emphasizes the importance of implementing proper input sanitization to secure web applications.

Affected Version(s)

Centreon Web on Central Server Linux 25.10; 24.10;24.04 < 25.10.8, 24.10.20, 24.04.24

References

https://https://thewatch.centreon.com/latest-security-bul...

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Texugo from HakaĂŻ Security
.