Vulnerability Report

CVE-2025-15029

Title: SQL Injection in Centreon Infra Monitoring (Awie export modules) to unauthenticated user

SQLi

Proof Of Concept

No public PoC currently indexed for CVE-2025-15029.

CWE Category CWE-89

Published Date Jan 05, 2026

Modified Date Jan 26, 2026

Exploit Status Not Found

Score 9.8 CVSS v3.1

Exploit Probability (EPSS)

11.20%

Vulnerability Summary

CVE-2025-15029: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

Impacted Vendors

centreon 1

Reference Links

https://github.com/centreon/centreon/releases

CVSS v3.1

Source Entity bd4443e6-1eef-43f3-9886-25fc9ceeaae7

Severity CRITICAL

9.8

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns