LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-2751 - Vulnerability Analysis

HighCVSS: 8.3

Last Updated: February 27, 2026

Centreon Centreon Web - SQL Injection

Published: February 27, 2026Updated: February 27, 2026Remote Exploitable

Overview

Centreon Centreon Web on Central Server < 25.10.8, 24.10.20, 24.04.24 contains a blind SQL injection caused by unsanitized array keys in Service Dependencies deletion, letting remote attackers execute blind SQL queries, exploit requires crafted request.

Severity & Score

Severity: High
CVSS Score: 8.3

Impact

Remote attackers can execute blind SQL queries, potentially leading to data leakage or database compromise.

Mitigation

Update to version 25.10.8, 24.10.20, 24.04.24 or later.

Details

CVE ID
CVE-2026-2751
Severity
High
CVSS Score
8.3
Type
sql_injection
Status
new

CWE

  • CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L