VulnerabilityAnalyzed

CVE-2026-2751

Blind SQL Injection via unsanitized array keys in Service Dependencies deletion.

CRITICAL 9.8EPSS 0.27%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.27%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.27% probability · 19th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: centreon/centreon web
Source: bd4443e6-1eef-43f3-9886-25fc9ceeaae7

References

https://https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504Broken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.