Login Request a demo
CW
Product
Centreon Web
by Centreon · last CVE Feb 27, 2026
56
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities56In the news0Timeline
Severity mix
Critical 8High 27Medium 21Low 0
Severity
All severities56Critical8High27Medium21Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Centreon Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2751
9.8
0%
Feb 27
Blind SQL Injection
Affected: 24.04.0 before 24.04.24.; 24.10.0 before 24.10.20; 25.10.0 before 25.10.8
CVE-2024-32501
9.8
19%
Aug 23
A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x…
Affected: 22.10.0 before 22.10.23; 23.04.0 before 23.04.19; 23.10.0 before 23.10.13; 24.04.0 before 24.04.3
CVE-2018-11589
9.8
2%
Jun 25
Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php,…
Affected: 2.8.23
CVE-2018-11587
9.8
4%
Jun 25
There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php
Affected: 2.8.23
CVE-2023-51633
9.6
1%
May 3
Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability
Affected: before 22.10.15; 23.04.0 before 23.04.10; 23.10.0 before 23.10.1
CVE-2024-33853
9.1
0%
Aug 23
A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before…
Affected: 22.10.0 before 22.10.23; 23.04.0 before 23.04.19; 23.10.0 before 23.10.13; 24.04.0 before 24.04.3
CVE-2024-33854
9.1
0%
Aug 23
A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before…
Affected: 22.10.0 before 22.10.23; 23.04.0 before 23.04.19; 23.10.0 before 23.10.13; 24.04.0 before 24.04.3
CVE-2024-33852
9.1
0%
Aug 23
A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before…
Affected: 22.10.0 before 22.10.23; 23.04.0 before 23.04.19; 23.10.0 before 23.10.13; 24.04.0 before 24.04.3
Showing 8