Vulnerabilities

TI-2025-13712 CVE-2025-15029 · GHSA-cq25-r5x7-j455

An unauthenticated user is able to introduce SQL Injection using the Awie export module

MEDIUM 63

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12961 Published 2026-01-05 Fixed in 25.10.2, 24.10.3 +1 CWE-89

TI-2025-13709 CVE-2025-15026 · GHSA-vmr4-xxx4-79m3

Unauthenticated configuration import allows administrative account creation using AWIE component

MEDIUM 49

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00419 Published 2026-01-05 Fixed in 25.10.2, 24.10.3 +1 CWE-306

Vulnerabilities

Filters

An unauthenticated user is able to introduce SQL Injection using the Awie export module

Unauthenticated configuration import allows administrative account creation using AWIE component