Lucene search
+L

24 matches found

EUVD
EUVD
added 2026/07/13 9:31 a.m.18 views

EUVD-2026-43316

This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messageconfirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to...

9.6CVSS6.4AI score0.00837EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/13 8:19 a.m.47 views

CVE-2026-14453 A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets

This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messageconfirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to...

9.6CVSS0.00837EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/13 8:19 a.m.13 views

CVE-2026-14453 A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets

This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messageconfirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to...

9.6CVSS6.4AI score0.00837EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/13 12:00 a.m.28 views

PT-2026-57656

This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message confirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, t...

9.6CVSS6.4AI score0.00837EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
added 2026/07/13 12:00 a.m.3 views

CVE-2026-14453: Improper Control of Generation of Code

This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messageconfirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to...

9.6CVSS0.00837EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/28 7:45 p.m.22 views

CVE-2026-2750

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centreon Open Tickets modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04...

9.8CVSS5.9AI score0.00303EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/28 7:45 p.m.14 views

CVE-2026-2749

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centroen Open Ticket modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7...

9.9CVSS5.9AI score0.00457EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/27 6:31 p.m.18 views

EUVD-2026-9029

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centreon Open Tickets modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04...

9.1CVSS5.9AI score0.00303EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/27 6:31 p.m.28 views

EUVD-2026-9028

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centroen Open Ticket modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7...

9.9CVSS5.9AI score0.00457EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/27 4:16 p.m.34 views

CVE-2026-2750

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centreon Open Tickets modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04...

9.8CVSS0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/27 4:16 p.m.20 views

CVE-2026-2749

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centroen Open Ticket modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7...

9.9CVSS0.00457EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/27 3:05 p.m.72 views

CVE-2026-2749

CVE-2026-2749 describes a path traversal vulnerability in Centreon Open Tickets on Central Server (Linux) affecting Centreon Open Tickets prior to versions 25.10.3, 24.10.8, and 24.04.7. Multiple connected sources (including Red Hat and CVE listings) identify the issue and imply the need to upgra...

9.9CVSS5.9AI score0.00457EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/27 3:05 p.m.10 views

CVE-2026-2749 Path traversal in Centreon Open Tickets

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centroen Open Ticket modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7...

9.9CVSS5.8AI score0.00457EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/02/27 3:05 p.m.9 views

CVE-2026-2749

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centroen Open Ticket modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7...

9.9CVSS5.9AI score0.00457EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/27 3:05 p.m.36 views

CVE-2026-2749 Path traversal in Centreon Open Tickets

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centroen Open Ticket modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7...

9.9CVSS0.00457EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/27 2:58 p.m.42 views

CVE-2026-2750 Command Injection via CLAPI generatetraps

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centreon Open Tickets modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04...

9.1CVSS0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/27 2:58 p.m.8 views

CVE-2026-2750 Command Injection via CLAPI generatetraps

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centreon Open Tickets modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04...

9.1CVSS5.8AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/27 2:58 p.m.55 views

CVE-2026-2750

The CVE-2026-2750 vulnerability concerns Centreon Open Tickets on the Central Server running Linux, caused by improper input validation. Affected versions are Centreon Open Tickets prior to 25.10, prior to 24.10, and prior to 24.04. Documented details across NVD/Red Hat/EUVD/AT sources consistent...

9.8CVSS5.9AI score0.00303EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
added 2026/02/27 2:58 p.m.21 views

CVE-2026-2750

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux Centreon Open Tickets modules.This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04...

9.8CVSS5.9AI score0.00303EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/27 12:00 a.m.25 views

Centreon Open Tickets on Central Server 安全漏洞

Centreon Open Tickets on Central Server is an incident management extension module developed by the French company Centreon. Versions of Centreon Open Tickets on Central Server prior to version 25.10, as well as versions before 24.10 and 24.04, contained security vulnerabilities due to improper...

9.8CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rows per page
Query Builder