CVE-2025-15029

—

CVSS 3.1

9.8 critical

EPSS

13%p96

Published

Jan 5, 2026 (Jan 5, 2026)

Modified

Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

Vendors: centreon
Products: awie
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.7%)

In the news0 stories

No ingested article mentions this CVE yet.