CVE-2025-15026

CRITICAL · 9.8 CVSS Gepubliceerd: 05-01-2026 CWE-306

Beschrijving

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

Vendors

Centreon

Affected products

Awie

References

github.com
thewatch.centreon.com