Critical severity · published Feb 27, 2026
CVE-2026-2750
Command Injection via CLAPI generatetraps
9.8
CVSS
0.3%
EPSS
No
On KEV
Description
Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Centreon Open Tickets on Central Server · Centreon
all before 25.10; 24.10;24.04 · source: vendor
WE
Web · Centreon
before 24.04.24; 24.10.0 before 24.10.20; 25.01.0 before 25.10.8 · source: NVD
Affected product
CO
Centreon Open Tickets on Central Server
Centreon