https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:31:28.117389+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0743 certfr-2024-avi-0743 — De multiples vulnérabilités ont été découvertes dans Centreon web. Elles permettent à un attaquant de provoquer une exé… 2026-10-06T10:31:28.175295+00:00 certfr-2024-avi-0743 https://cve.radiocsirt.org/vuln/euvd-2026-159541 EUVD-2026-159541 2026-10-06T10:31:28.175351+00:00 EUVD-2026-159541 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5725 fkie_cve-2024-5725 2026-10-06T10:31:28.175367+00:00

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.

The specific flaw exists within the initCurveList function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the apache user. Was ZDI-CAN-22683.

 https://cve.radiocsirt.org/vuln/ghsa-67c5-gg2x-j6wg GHSA-67c5-gg2x-j6wg 2026-10-06T10:31:28.175402+00:00

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.

The specific flaw exists within the initCurveList function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the apache user. Was ZDI-CAN-22683.