PT-2026-1288 · Centreon · Centreon-Awie+1

Marceloqj · Publicado 2026-01-05 · Atualizado 2026-01-08 · CVE-2025-15026

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Centreon Infra Monitoring centreon-awie versions 25.10.0 through 25.10.1 Centreon Infra Monitoring centreon-awie versions 24.10.0 through 24.10.2 Centreon Infra Monitoring centreon-awie versions 24.04.0 through 24.04.2

Description A missing authentication check for a critical function within the centreon-awie (Awie import module) of Centreon Infra Monitoring allows access to functionality that is not properly restricted by Access Control Lists (ACLs). This allows unauthorized access to certain functions.

Recommendations Update Centreon Infra Monitoring centreon-awie to version 25.10.2 or later. Update Centreon Infra Monitoring centreon-awie to version 24.10.3 or later. Update Centreon Infra Monitoring centreon-awie to version 24.04.3 or later.

Exploit

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

BDU:2026-00667

CVE-2025-15026

Produtos afetados

Centreon Infra Monitoring

Centreon-Awie

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15026.json · Exploit
• https://github.com/centreon/centreon/releases · Nota
• https://osv.dev/vulnerability/CVE-2025-15026 · Aviso do Fabricante
• https://t.me/CVEtracker/41383 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2026-00667 · Nota de Segurança
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-15026-centreon-awie-critical-severity-5357 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2008189677732237427 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-15026 · Nota de Segurança
• https://twitter.com/TheHackerWire/status/2008206800227819640 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2008292648365289946 · Publicação no Twitter
• https://twitter.com/pulsepatchio/status/2008908942416732279 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2008201639086150004 · Publicação no Twitter