CTIPilot
AI-generated · no human review · verify critical claims against the linked source. how it works →

Centreon Infra Monitoring

product · product:centreon-infra-monitoring

Coverage
1
first 2026-05-13 → last 2026-10-21
Latest activity
2026-05-13
Centreon fixes SQL injection in eight Infra Monitoring components and command injection in MBI…
Peak priority
notable
1 notable
Targets
public-sector
sectors: public-sector · regions: europe
Sources cited
2
2 hosts

Defender insights

What each entry about Centreon Infra Monitoring tells a defender to do, newest first.

2026-05-13NOTABLECentreon fixes SQL injection in eight Infra Monitoring components and command injection in MBI (CERTFR-2026-AVI-0572)

Exposure

Story timeline

  1. 2026-05-13CERTFR-2026-AVI-0572: Centreon April 2026 bulletin, SQL injection in eight components, command injection in MBI and XSS in MAP
    trending-vulnerabilitiesCentreon fixes SQL injection in eight Infra Monitoring components and command injection in MBI (CERTFR-2026-AVI-0572)

Hunting pivots

Releases covered
Centreon Infra Monitoring
Tags
patch-availablercevulnerabilities
ATT&CK techniques (1 across 1 tactic)

1 technique observed across 1 entry about this entity, derived from entry metadata and body evidence, never asserted without a published entry behind it · pinned to MITRE ATT&CK v20.0 · compare on the matrix · Navigator layer (JSON)

  • Initial AccessExploit Public-Facing Application

Initial Access TA0001

T1190Exploit Public-Facing Application×1

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network. The weakness in the system can be a software bug, a temporary glitch, or a misconfiguration.

Evidence: 2026-05-13/certfr-2026-avi-0572-centreon-infra-monitoring-rce-sqli-xss · ATT&CK page ↗

Entries about Centreon Infra Monitoring (1)

2026-05-13 · view entry permalink →

NOTABLEupdatedNATOA2

CERTFR-2026-AVI-0572: Centreon April 2026 bulletin, SQL injection in eight components, command injection in MBI and XSS in MAP

Centreon published its April 2026 monthly security bulletin for Centreon Infra Monitoring on 2026-05-12: SQL injection through string concatenation across legacy PHP files in Anomaly Detection, Auto Discovery, AWIE, BAM, DSM, License Manager, MAP and Open Tickets (CVSS 8.8 each), command injection through a dos2unix exec call in MBI (CVSS 8.8) and an XSS in MAP through altered SVG images (CVSS 6.8), each listed with no reference identifier (Centreon, 2026-05-12). CERT-FR relayed it as CERTFR-2026-AVI-0572 with remote code execution, SQL injection and XSS as the risks, and lists no CVE identifiers (CERT-FR, 2026-05-12). The first fixed releases are Anomaly Detection 24.10.10 and 25.10.5, Auto Discovery 24.10.13 and 25.10.5, AWIE 24.10.6 and 25.10.6, BAM 24.10.14 and 25.10.5, DSM 24.10.6 and 25.10.3, License Manager 24.10.9 and 25.10.4, MAP 24.10.17 and 25.10.5, MBI 24.04.15, 24.10.17 and 25.10.5, and Open Tickets 24.10.11 and 25.10.6 (CERT-FR, 2026-05-12). Neither source states whether exploitation needs authentication or reports exploitation as of 2026-05-12 (Centreon, 2026-05-12; CERT-FR, 2026-05-12).

SQL injection via string concatenation across legacy PHP files

Command injection via dos2unix exec

XSS in images by altering the SVG

Centreon security bulletin 2026-05-12

MBI versions 24.04.x before 24.04.15 (translated from French)

CERT-FR CERTFR-2026-AVI-0572 2026-05-12
Correctionrun 2026-10-21T1148Z-auditaffected_productsbodyclassificationentitiesevidenceheadlinesourcessourcing_notesummarytechniquestitle

Centreon's bulletin lists every fix with no reference identifier and CERT-FR's advisory has no CVE section, so no CVE identifiers exist for this release (Centreon, 2026-05-12; CERT-FR, 2026-05-12). The flaws are SQL injection through string concatenation in legacy PHP files of eight components, command injection through a dos2unix exec call in MBI and an XSS through altered SVG images in MAP, each with its own fixed release per branch (CERT-FR, 2026-05-12). The Fortinet, Exim, Microsoft and SAP vulnerabilities patched the same week are separate advisories, not part of this Centreon release, and neither Centreon advisory describes Centreon's deployment in public-sector networks or the monitored-host credentials it holds (CERT-FR, 2026-05-12).

vulnerability13 May 05:00Zmulti-sourceOpen finding →
Sources: CERT-FR CERTFR-2026-AVI-0572 · Centreon security bulletin

Co-occurring entities

Derived: referenced by the same focused operational entries (weekly summaries and report roundups don't count); ×N counts the shared entries.

Where this entity is cited

  • Vulns1

Source distribution

  • cert.ssi.gouv.fr1 (50%)
  • thewatch.centreon.com1 (50%)
All cited sources (2)