PT-2026-1289 · Centreon · Centreon Infra Monitoring

Marceloqj · Publicado 2026-01-05 · Atualizado 2026-01-08 · CVE-2025-15029

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Centreon Infra Monitoring versions 24.04.0 through 24.04.3 Centreon Infra Monitoring versions 24.10.0 through 24.10.3 Centreon Infra Monitoring versions 25.10.0 through 25.10.2

Description A flaw exists in Centreon Infra Monitoring (Awie export modules) that allows for SQL Injection. This issue can be exploited by an unauthenticated user. The vulnerability involves improper neutralization of special elements used in an SQL command. Exploitation could lead to full system compromise.

Recommendations Update Centreon Infra Monitoring to version 24.04.3 or later. Update Centreon Infra Monitoring to version 24.10.3 or later. Update Centreon Infra Monitoring to version 25.10.2 or later.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2026-00666

CVE-2025-15029

Produtos afetados

Centreon Infra Monitoring

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15029.json · Exploit
• https://github.com/centreon/centreon/releases · Nota
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-15029-centreon-awie-critical-severity-5356 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2008206848013570306 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2008228472603258940 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-00666 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-15029 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-15029 · Nota de Segurança
• https://t.me/CVEtracker/41384 · Publicação no Telegram
• https://twitter.com/CveFindCom/status/2008201608115408978 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2008328163940610391 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2008189675664523417 · Publicação no Twitter