https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T07:42:57.895424+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-04479 cnvd-2015-04479 2026-10-22T07:42:57.900230+00:00 cnvd-2015-04479 https://cve.radiocsirt.org/vuln/euvd-2026-90356 EUVD-2026-90356 2026-10-22T07:42:57.900265+00:00 EUVD-2026-90356 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1561 fkie_cve-2015-1561 2026-10-22T07:42:57.900279+00:00

The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns_id parameter.

 https://cve.radiocsirt.org/vuln/ghsa-c4fj-3wqq-g9c9 GHSA-c4fj-3wqq-g9c9 — Centreon Command Injection 2026-10-22T07:42:57.900308+00:00

Affected: Packagist: centreon/centreon

The `escape_command` function in `include/Administration/corePerformance/getStats.php` in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (offending file deleted in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the `ns_id` parameter.

 https://cve.radiocsirt.org/vuln/gsd-2015-1561 gsd-2015-1561 2026-10-22T07:42:57.900331+00:00 gsd-2015-1561