Recommended action window: Monitor and triage in normal cycle
NVD description
Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CRITICAL: CVE-2025-15026 (CVSS 9.8) - Missing authentication in Centreon centreon-awie module allows unauthenticated remote attackers to access critical functions. Affects v25.10.0-25.10.1, v24.10.0-24.10.2, v24.04.0-24.04.2. Patch immediately. #CVE #PatchNow https://t.co/JB1zlHQKFH
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | centreon | awie | - | - | - |