Vulnerability · Published Jan 5, 2026 · Assigned by Centreon

CVE-2025-5965RCE via the backup feature available only to user with high privilege

High 7.2

In plain English

A high-severity OS command injection in Infra Monitoring from Centreon. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 28.2% (higher than 98% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High

Exploit odds (30 days)28.2%top 1.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.

Affected products (as reported)

Vendor	Product	Versions
Centreon	Infra Monitoring	25.10.0 – before 25.10.224.10.0 – before 24.10.1524.04.0 – before 24.04.19

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/centreon/centreon/releases release-notes
https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5965-centreon-web-high-severity-5362 vendor-advisory