PT-2025-33108 · Git+1 · Centreon+2

Spawnzii · Published 2025-08-13 · Updated 2025-09-16 · CVE-2025-6791

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Centreon web versions 23.10.0 through 23.10.26 Centreon web versions 24.04.0 through 24.04.16 Centreon web versions 24.10.0 through 24.10.9

Description: The web application is susceptible to SQL Injection due to improper neutralization of special elements used in an SQL command within the Monitoring event logs module. An authenticated, low-privileged attacker can manipulate the database by altering HTTP requests to insert a payload.

Recommendations: Centreon web versions prior to 23.10.26 should be updated. Centreon web versions prior to 24.04.16 should be updated. Centreon web versions prior to 24.10.9 should be updated.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-6791

Affected Products

Centreon

Centreon Web

Web

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6791.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6791 · Security Note
• https://osv.dev/vulnerability/CVE-2025-6791 · Vendor Advisory
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-6791-centreon-web-all-versions-high-severity-4900 · Vendor Advisory
• https://github.com/centreon/centreon/releases · Note
• https://twitter.com/CveFindCom/status/1958970009578827781 · Twitter Post
• https://t.me/CVEtracker/30729 · Telegram Post
• https://twitter.com/CCBalert/status/1955624581512790189 · Twitter Post
• https://t.me/cveNotify/135589 · Telegram Post
• https://twitter.com/CVEnew/status/1958974278298485172 · Twitter Post