Centreon Open Tickets Improper Input Validation Vulnerability Allowing Remote Code Execution

A vulnerability allowing remote code execution has been identified in the Centreon Open Tickets module on Central Server running Linux. This issue arises from improper input validation and affects Centreon versions prior to 25.10, as well as versions 24.10 and 24.04.

Impact

The vulnerability allows remote code execution on the server where Centreon Open Tickets is installed.

Remediation

Users are advised to update to Centreon Web versions 25.10.8, 24.10.20, or 24.04.24, all of which include cumulative fixes from prior updates. For those on a High Availability Platform, it is important to follow the Centreon HA Update procedures.