{"id":"CVE-2026-2751","state":"PUBLISHED","title":"Blind SQL Injection","description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.","publishedAt":"2026-02-27T13:33:44.787Z","updatedAt":"2026-02-27T14:26:21.910Z","severity":{"score":8.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","source":"Centreon"},"assigner":"Centreon","products":["Centreon Centreon Web on Central Server"],"affected":[{"vendor":"Centreon","product":"Centreon Web on Central Server","defaultStatus":"unaffected","versions":[{"version":"25.10; 24.10;24.04","status":"affected","lessThan":"25.10.8, 24.10.20, 24.04.24","versionType":"custom"}],"collectionURL":"https://download.centreon.com","modules":["Service Dependencies"],"platforms":["Linux"]}],"references":["https://https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:11:31.369Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/2xxx/CVE-2026-2751.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-2751","state":"PUBLISHED","datePublished":"2026-02-27T13:33:44.787Z","dateUpdated":"2026-02-27T14:26:21.910Z","assignerShortName":"Centreon","assignerOrgId":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","dateReserved":"2026-02-19T14:25:19.973Z"},"containers":{"cna":{"title":"Blind SQL Injection","descriptions":[{"lang":"en","value":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24."}],"affected":[{"vendor":"Centreon","product":"Centreon Web on Central Server","defaultStatus":"unaffected","versions":[{"version":"25.10; 24.10;24.04","status":"affected","lessThan":"25.10.8, 24.10.20, 24.04.24","versionType":"custom"}],"collectionURL":"https://download.centreon.com","modules":["Service Dependencies"],"platforms":["Linux"]}],"references":[{"url":"https://https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":8.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"Blind SQL Injection via unsanitized array keys in Service Dependencies deletion.","lang":"en"}]}],"providerMetadata":{"shortName":"Centreon","orgId":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","dateUpdated":"2026-02-27T13:43:22.569Z"},"credits":[{"lang":"en","type":"finder","value":"Texugo from Hakaï Security"}],"datePublic":"2026-02-27T13:31:00.000Z","impacts":[{"capecId":"CAPEC-7","descriptions":[{"lang":"en","value":"CAPEC-7 Blind SQL Injection"}]}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-27T14:25:27.597975Z","id":"CVE-2026-2751","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-27T14:26:21.910Z"}}]}}}