CVE-2025-15026
- Source
- https://cve.org/CVERecord?id=CVE-2025-15026
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15026.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-15026
- Published
- 2026-01-05T14:31:34.223Z
- Modified
- 2026-07-15T01:49:07.872285442Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Unauthenticated configuration import allows administrative account creation using AWIE component
- Details
-
Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.
- Database specific
{ "cwe_ids": [ "CWE-306" ], "cna_assigner": "Centreon", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15026.json" }- References
Affected packages
Git / github.com/centreon/centreon
Affected ranges
- Type
- GIT
- Repo
- https://github.com/centreon/centreon
- Events
- Database specific
{ "extracted_events": [ { "introduced": "24.04.0" }, { "fixed": "24.04.3" }, { "introduced": "24.10.0" }, { "fixed": "24.10.3" }, { "introduced": "25.10.0" }, { "fixed": "25.10.2" } ], "cpe": "cpe:2.3:a:centreon:awie:*:*:*:*:*:*:*:*", "source": "CPE_RANGE" }
Affected versions
centreon-awie-24.*
centreon-awie-24.04.0
centreon-awie-24.10.0
centreon-dsm-24.*
centreon-dsm-24.04.0
centreon-dsm-24.04.2
centreon-dsm-24.10.0
centreon-gorgone-24.*
centreon-gorgone-24.04.0
centreon-ha-24.*
centreon-ha-24.04.0
centreon-open-tickets-24.*
centreon-open-tickets-24.04.0
centreon-open-tickets-24.10.0
centreon-open-tickets-24.10.1
centreon-web-24.*
centreon-web-24.04.0
centreon-web-24.04.2
centreon-web-24.10.0
centreon-web-24.10.1
centreon-web-24.10.2