Texugo

**Name of the Vulnerable Software and Affected Versions** Centreon Open Tickets versions prior to 25.10.3 Centreon Open Tickets versions prior to 24.10.8 Centreon Open Tickets versions prior to 24.04.7 **Description** A security issue exists in Centreon Open Tickets on Central Server on Linux. The issue affects the Centreon Open Ticket modules. **Recommendations** Update Centreon Open Tickets to version 25.10.3 or later. Update Centreon Open Tickets to version 24.10.8 or later. Update Centreon Open Tickets to version 24.04.7 or later.

**Name of the Vulnerable Software and Affected Versions** Centreon Open Tickets versions prior to 25.10 Centreon Open Tickets versions prior to 24.10 Centreon Open Tickets versions prior to 24.04 **Description** An improper input validation issue exists in Centreon Open Tickets on Central Server on Linux systems. The issue affects the Centreon Open Tickets modules. **Recommendations** Update to version 25.10 Update to version 24.10 Update to version 24.04

**Name of the Vulnerable Software and Affected Versions** Centreon versions prior to 25.10.8 Centreon versions prior to 24.10.20 Centreon versions prior to 24.04.24 **Description** A Blind SQL Injection can occur due to unsanitized array keys during the deletion of Service Dependencies. This issue affects the Centreon Web application on the Central Server running on Linux, specifically within the Service Dependencies modules. The injection is possible because input validation is insufficient when processing array keys, potentially allowing an attacker to manipulate database queries. **Recommendations** Update to Centreon version 25.10.8 or later. Update to Centreon version 24.10.20 or later. Update to Centreon version 24.04.24 or later.

**Name of the Vulnerable Software and Affected Versions** Centreon Infra Monitoring versions 24.04, 24.10, and 25.10 **Description** A blind time-based SQL injection exists in the Service Dependencies page of Centreon Infra Monitoring. An authenticated user can inject arbitrary SQL via the `select[]` POST array parameter. This allows for full database extraction. **Recommendations** Update Centreon Infra Monitoring to a version after 25.10.