Live › vulnerability › CVE-2026-11587
A logged-in user who can manage access control lists in Centreon can inject SQL into a request. That lets them read and modify the Centreon database.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
Self-hosted Centreon Web central servers on 25.10 before 25.10.15 or 24.10 before 24.10.28. The attacker must be logged in with rights to manage ACL (resources and actions) pages, which is a high privilege, and the flaw lets them read and change the whole Centreon database through a crafted request. Teams where only trusted admins have ACL management rights face lower risk.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| centreon-web | vendor | >= 25.10.0, < 25.10.15 | 25.10.15 |
| centreon-web | vendor | >= 24.10.0, < 24.10.28 | 24.10.28 |
rpm -q centreon-web (or ; the version also shows in the web UI)dnf list installed centreon-web25.10.15 or 24.10.x below 24.10.28 and some account has access to ACL management (Resources or Actions access)25.10.15 or later (25.10 branch), or 24.10.28 or later (24.10 branch)25.10.17, 24.10.30 per the August 2026 bulletin)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database
This page as .md · .json · in your agent: get_signal("CVE-2026-11587")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.