TI-2026-12217 Aliases CVE-2026-14453 GHSA-623j-mjcm-f442

A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets

MEDIUM 44CWE-94Published 2026-07-13 · Updated 2026-07-13

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message_confirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to inject and execute arbitrary code on the server. This results in disclosure of environment secrets and could impact platform availability of Centreon Infra Monitoring product.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00837 57th percentileScored 2026-11-07

Fix Fixed Infra Monitoring (Centreon): 24.10.14, 25.10.9

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Centreon	Infra Monitoring	24.10.0 to before 24.10.14; 25.10.0 to before 25.10.9	24.10.14, 25.10.9	Patch available	CNA

Infra Monitoring VendorCentreon Affected 24.10.0 to before 24.10.14; 25.10.0 to before 25.10.9 Fixed in 24.10.14, 25.10.9 Patch available CNA

Remediation

Fix · CNA Infra Monitoring (Centreon) Fixed in 24.10.14, 25.10.9

Timeline

2026-10-02 Threatist record created from CVE-2026-14453
2026-10-03 Alias added: GHSA-623j-mjcm-f442

References

Other 1

https://github.com/centreon/centreon/releases

TI-2022-19661 SQL injection in Centreon CVSS 3.1HIGH 8.8
TI-2022-20634 SQL injection in Centreon CVSS 3.1HIGH 8.8
TI-2022-20632 SQL injection in Centreon CVSS 3.1HIGH 8.8
TI-2022-20630 SQL injection in Centreon CVSS 3.1HIGH 8.8
TI-2022-20629 SQL injection in Centreon CVSS 3.1HIGH 8.8
TI-2024-00588 SQL injection in Centreon CVSS 3.0HIGH 8.8

See all 130 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences