Vulnerability · Published Feb 27, 2026 · Assigned by Centreon
CVE-2026-2751Blind SQL Injection
High 8.3
In plain English
A high-severity SQL injection in Centreon Web on Central Server from Centreon. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.3%top 76.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Centreon | Centreon Web on Central Server | 25.10; 24.10;24.04 – before 25.10.8, 24.10.20, 24.04.24 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L