Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection. On the poller parameters page, a user with high privilege is able to concatenate custom instructions into the poller reload command. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CVE-2025-5946 | CVSS 7.2 HIGH OS Command Injection in Centreon Infra Monitoring (poller reload). High-privilege users can inject commands via poller parameters. Affected: v24.10.0-24.10.12, v24.04.0-24.04.17, v23.10.0-23.10.27 Patch immediately. #CVE #PatchNow https://t.co/7V5QguljPt
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | centreon | centreon_web | - | - | - |