CVE-2026-2749

CVE-2026-2749 describes a path traversal vulnerability in Centreon Open Tickets on Central Server (Linux) affecting Centreon Open Tickets prior to versions 25.10.3, 24.10.8, and 24.04.7. Multiple connected sources (including Red Hat and CVE listings) identify the issue and imply the need to upgra...

CVE-2025-12514

CVE-2025-12514 affects Centreon Infra Monitoring - Open-tickets (Notification rules configuration parameters, Open tickets modules). The root cause is improper neutralization of special elements in SQL commands, enabling SQL Injection. Affected versions are 23.10.0–23.10.4, 24.04.0–24.04.5, and 2...

CVE-2025-8460

Centreon Infra Monitoring (Notification rules, Open tickets module) has a stored XSS vulnerability (CVE-2025-8460). Affected versions are 23.10.0–23.10.4, 24.04.0–24.04.5, and 24.10.0–24.10.5. Root cause: improper neutralization of user input in web page generation. Remediation per linked sources...