PT-2026-1256 · Centreon · Centreon Infra Monitoring

Marcelo Quieroz · Published 2026-01-05 · Updated 2026-01-26 · CVE-2025-12519

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Centreon Infra Monitoring versions 24.04.0 through 24.04.19 Centreon Infra Monitoring versions 24.10.0 through 24.10.15 Centreon Infra Monitoring versions 25.10.0 through 25.10.2

Description A missing authorization flaw exists in Centreon Infra Monitoring, specifically within the Administration parameters API endpoint modules. This issue allows access to functionality that is not properly restricted by Access Control Lists (ACLs), leading to information disclosure. The disclosed information includes downtime and acknowledgement configurations. The vulnerable component is the Administration parameters API endpoint.

Recommendations Update Centreon Infra Monitoring versions prior to 25.10.2. Update Centreon Infra Monitoring versions prior to 24.10.15. Update Centreon Infra Monitoring versions prior to 24.04.19.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-12519

Affected Products

Centreon Infra Monitoring

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12519.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-12519 · Security Note
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12519-centreon-web-medium-severity-5359 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-12519 · Vendor Advisory
• https://github.com/centreon/centreon/releases · Note
• https://twitter.com/CVEnew/status/2008129297823756370 · Twitter Post
• https://t.me/cveNotify/149875 · Telegram Post
• https://t.me/CVEtracker/41362 · Telegram Post