CVE-2025-6791

published 2025-08-22

CVE-2025-6791: In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neutralization of…

Priority P3 57 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon web (Monitoring event logs modules) allows SQL Injection.This issue affects web: 24.10.0, 24.04.0, 23.10.0.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
centreon	centreon_web	>= 23.10.0 < 23.10.26	23.10.26
centreon	centreon_web	>= 24.04.0 < 24.04.16	24.04.16
centreon	centreon_web	>= 24.10.0 < 24.10.9	24.10.9
centreon	web	>= 23.10.0 < 23.10.26	23.10.26
centreon	web	>= 24.04.0 < 24.04.16	24.04.16
centreon	web	>= 24.10.0 < 24.10.9	24.10.9

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89