← Back to browse · API

CVE-2025-15029

Severity
CRITICAL
CVSS
9.8
EPSS
0.11395
Risk score
43.19
CISA KEV
No
PoC
No
Published
2026-01-05
Modified
2026-01-08
First seen
2026-08-07
Aliases
EUVD-2026-0851, GHSA-CQ25-R5X7-J455
Products
Centreon:Infra Monitoring 24.04.0 <24.04.3, Centreon:Infra Monitoring 24.10.0 <24.10.3, Centreon:Infra Monitoring 25.10.0 <25.10.2
Sources
euvd EUVD-2026-0851

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

References