CVE-2025-15029

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - bd4443e6-1eef-43f3-9886-25fc9ceeaae7

Published

2026-01-05

Last modified

2026-10-07

Weaknesses

CWE-89

Affected products

• Awie (Centreon)
• Infra Monitoring (Centreon)

References

• https://github.com/centreon/centreon/releases
• https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-15029-centreon-awie-critical-severity-5356