CVE-2025-5946

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-5946

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-5946.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2025-5946

Published

2025-10-14T14:29:00.514Z

Modified

2025-12-02T20:16:23.993447Z

Severity

7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

RCE via the poller reload feature available only to user with high privilege

Details

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection. On the poller parameters page, a user with high privilege is able to concatenate custom instructions into the poller reload command.

This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5946.json",
    "cna_assigner": "Centreon",
    "cwe_ids": [
        "CWE-78"
    ]
}

References

Affected packages

Git / github.com/centreon/centreon

Affected ranges

Type

GIT

Repo

https://github.com/centreon/centreon

Events

Introduced

38e3f869ec4005acb857c92e3e2671bfa60879b4

Fixed

177a3974fdcb27b3df760bac2ac3ee6edf33aa85

Database specific

{
    "versions": [
        {
            "introduced": "24.10.0"
        },
        {
            "fixed": "24.10.13"
        }
    ]
}

Type

GIT

Repo

https://github.com/centreon/centreon

Events

Introduced

7b39edd9d115eabe0fae2b4bd1aded1889dbb6c3

Fixed

6390e0c7e585ee5aa4226122974a5d337c759f23

Database specific

{
    "versions": [
        {
            "introduced": "24.04.0"
        },
        {
            "fixed": "24.04.18"
        }
    ]
}

Type

GIT

Repo

https://github.com/centreon/centreon

Events

Introduced

755448bcd365969a97e902b856a1e5f56d80adaa

Fixed

c5a9b088358a21efc8f8f7a199b89fd7ef2a3b9c

Database specific

{
    "versions": [
        {
            "introduced": "23.10.0"
        },
        {
            "fixed": "23.10.28"
        }
    ]
}

Affected versions

centreon-awie-23.*

centreon-awie-23.10.0

centreon-awie-24.*

centreon-awie-24.04.0

centreon-awie-24.04.1

centreon-awie-24.10.0

centreon-awie-24.10.1

centreon-dsm-23.*

centreon-dsm-23.10.0

centreon-dsm-23.10.1

centreon-dsm-23.10.2

centreon-dsm-23.10.3

centreon-dsm-23.10.4

centreon-dsm-24.*

centreon-dsm-24.04.0

centreon-dsm-24.04.2

centreon-dsm-24.04.3

centreon-dsm-24.04.4

centreon-dsm-24.04.5

centreon-dsm-24.04.6

centreon-dsm-24.10.0

centreon-dsm-24.10.1

centreon-dsm-24.10.2

centreon-gorgone-23.*

centreon-gorgone-23.10.0

centreon-gorgone-23.10.1

centreon-gorgone-23.10.2

centreon-gorgone-23.10.3

centreon-gorgone-23.10.5

centreon-gorgone-23.10.6

centreon-gorgone-23.10.7

centreon-gorgone-23.10.8

centreon-gorgone-23.10.9

centreon-gorgone-24.*

centreon-gorgone-24.04.0

centreon-gorgone-24.04.1

centreon-gorgone-24.04.2

centreon-ha-23.*

centreon-ha-23.10.0

centreon-ha-23.10.1

centreon-ha-24.*

centreon-ha-24.04.0

centreon-ha-24.04.1

centreon-ha-24.10.0

centreon-ha-24.10.1

centreon-open-tickets-23.*

centreon-open-tickets-23.10.0

centreon-open-tickets-23.10.1

centreon-open-tickets-23.10.2

centreon-open-tickets-23.10.3

centreon-open-tickets-24.*

centreon-open-tickets-24.04.0

centreon-open-tickets-24.04.1

centreon-open-tickets-24.04.2

centreon-open-tickets-24.04.3

centreon-open-tickets-24.04.4

centreon-open-tickets-24.10.0

centreon-open-tickets-24.10.1

centreon-open-tickets-24.10.2

centreon-open-tickets-24.10.3

centreon-web-23.*

centreon-web-23.10.0

centreon-web-23.10.1

centreon-web-23.10.11

centreon-web-23.10.12

centreon-web-23.10.13

centreon-web-23.10.14

centreon-web-23.10.15

centreon-web-23.10.16

centreon-web-23.10.17

centreon-web-23.10.18

centreon-web-23.10.19

centreon-web-23.10.2

centreon-web-23.10.20

centreon-web-23.10.21

centreon-web-23.10.22

centreon-web-23.10.23

centreon-web-23.10.24

centreon-web-23.10.25

centreon-web-23.10.26

centreon-web-23.10.27

centreon-web-23.10.3

centreon-web-23.10.4

centreon-web-23.10.5

centreon-web-23.10.6

centreon-web-23.10.7

centreon-web-23.10.8

centreon-web-23.10.9

centreon-web-24.*

centreon-web-24.04.0

centreon-web-24.04.10

centreon-web-24.04.11

centreon-web-24.04.12

centreon-web-24.04.13

centreon-web-24.04.14

centreon-web-24.04.15

centreon-web-24.04.16

centreon-web-24.04.17

centreon-web-24.04.2

centreon-web-24.04.3

centreon-web-24.04.4

centreon-web-24.04.5

centreon-web-24.04.6

centreon-web-24.04.7

centreon-web-24.04.8

centreon-web-24.04.9

centreon-web-24.10.0

centreon-web-24.10.1

centreon-web-24.10.10

centreon-web-24.10.11

centreon-web-24.10.12

centreon-web-24.10.2

centreon-web-24.10.3

centreon-web-24.10.4

centreon-web-24.10.5

centreon-web-24.10.6

centreon-web-24.10.7

centreon-web-24.10.8

centreon-web-24.10.9

centreon-widget-engine-status-23.*

centreon-widget-engine-status-23.10.0

centreon-widget-global-health-23.*

centreon-widget-global-health-23.10.0

centreon-widget-graph-monitoring-23.*

centreon-widget-graph-monitoring-23.10.0

centreon-widget-graph-monitoring-23.10.1

centreon-widget-host-monitoring-23.*

centreon-widget-host-monitoring-23.10.0

centreon-widget-host-monitoring-23.10.1

centreon-widget-host-monitoring-23.10.2

centreon-widget-host-monitoring-23.10.4

centreon-widget-hostgroup-monitoring-23.*

centreon-widget-hostgroup-monitoring-23.10.0

centreon-widget-hostgroup-monitoring-23.10.1

centreon-widget-hostgroup-monitoring-23.10.2

centreon-widget-httploader-23.*

centreon-widget-httploader-23.10.0

centreon-widget-live-top10-cpu-usage-23.*

centreon-widget-live-top10-cpu-usage-23.10.0

centreon-widget-live-top10-cpu-usage-23.10.1

centreon-widget-live-top10-memory-usage-23.*

centreon-widget-live-top10-memory-usage-23.10.0

centreon-widget-live-top10-memory-usage-23.10.1

centreon-widget-ntopng-listing-23.*

centreon-widget-ntopng-listing-23.10.0

centreon-widget-service-monitoring-23.*

centreon-widget-service-monitoring-23.10.0

centreon-widget-service-monitoring-23.10.1

centreon-widget-service-monitoring-23.10.2

centreon-widget-servicegroup-monitoring-23.*

centreon-widget-servicegroup-monitoring-23.10.0

centreon-widget-servicegroup-monitoring-23.10.1

centreon-widget-servicegroup-monitoring-23.10.2

centreon-widget-servicegroup-monitoring-23.10.3

centreon-widget-single-metric-23.*

centreon-widget-single-metric-23.10.0

centreon-widget-tactical-overview-23.*

centreon-widget-tactical-overview-23.10.0