The escape_command function in include/Administration/corePerformance/getStats.php in…
Priority MEDIUM 40CWE-77Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-77.
Summary
The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns_id parameter.
Why it matters now
EPSS 0.08272 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed centreon/centreon (Packagist): 2.8.28
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | centreon/centreon (Packagist) | before 2.8.28 | 2.8.28 | Patch available | GHSA-c4fj-3wqq-g9c9 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- centreon/centreon (Packagist) Vendor— Affected before 2.8.28 Fixed in 2.8.28 Patch available GHSA-c4fj-3wqq-g9c9
Remediation
- Fix · GHSA-c4fj-3wqq-g9c9 centreon/centreon (Packagist) Fixed in 2.8.28 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2015-1561
- 2026-10-03 Alias added: GHSA-c4fj-3wqq-g9c9
- 2026-10-25 EPSS moved to the 90th–95th percentile
References
Other 8
- https://forge.centreon.com/projects/centreon/repository/revisions/387dffdd051dbc7a234e1138a9d06f3089bb55bb
- https://github.com/centreon/centreon/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a#diff-27550b563fa8d660b64bca871a219cb1
- https://github.com/centreon/centreon-archived/pull/7083
- https://github.com/centreon/centreon-archived/pull/7271
- https://github.com/centreon/centreon-archived/commit/387dffdd051dbc7a234e1138a9d06f3089bb55bb
- https://github.com/centreon/centreon-archived/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a
- https://github.com/centreon/centreon-archived
- https://web.archive.org/web/20201125112637/http://www.securityfocus.com/archive/1/535961/100/0/threaded
More Centreon vulnerabilities
- TI-2022-19661 SQL injection in Centreon CVSS 3.1HIGH 8.8
- TI-2022-20634 SQL injection in Centreon CVSS 3.1HIGH 8.8
- TI-2022-20632 SQL injection in Centreon CVSS 3.1HIGH 8.8
- TI-2022-20630 SQL injection in Centreon CVSS 3.1HIGH 8.8
- TI-2022-20629 SQL injection in Centreon CVSS 3.1HIGH 8.8
- TI-2019-09757 Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows… CVSS 3.0HIGH 8.8
Sources
- CVE-2015-1561 · CVE Program
- CVE-2015-1561 · NVD
- FIRST EPSS
- GHSA-c4fj-3wqq-g9c9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences