CVE-2026-2749
Privilege Escalation Vulnerability in Centreon Open Tickets Module
Publication date: 2026-02-27
Last updated on: 2026-03-23
Assigner: Centreon
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| centreon | open_tickets | to 24.04.7 (exc) |
| centreon | open_tickets | From 24.10.0 (inc) to 24.10.8 (exc) |
| centreon | open_tickets | From 25.10.0 (inc) to 25.10.3 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-22 | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects the Centreon Open Tickets module on the Central Server running on Linux. It impacts all versions before 25.10.3, 24.10.8, and 24.04.7. The vulnerability is severe, with a CVSS v3.1 base score of 9.9, indicating it can be exploited remotely with low complexity and no user interaction, and it results in high impact on confidentiality, integrity, and availability.
How can this vulnerability impact me? :
Exploitation of this vulnerability can lead to a complete compromise of the affected Centreon Open Tickets system. Given the high CVSS score and the impact on confidentiality, integrity, and availability, an attacker could gain unauthorized access, modify data, and disrupt services, potentially causing significant operational and security issues.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know