CVE-2026-2750 is a critical (CVSS 9.1) improper input validation flaw in the Centreon Open Tickets modules on the Central Server. Centreon says it leads to remote code execution on CLAPI. Update Centreon Web to 25.10.8, 24.10.20 or 24.04.24, depending on your release line.
What's affected
Centreon Open Tickets on the Central Server, from all versions before 25.10, and the 24.10 and 24.04 lines, on Linux. Centreon's bulletin lists fixes for all supported versions:
- Centreon Web 25.10.8
- Centreon Web 24.10.20
- Centreon Web 24.04.24
These versions include earlier cumulative fixes. High availability platforms need the Centreon HA update procedure.
How to check if you're exposed
Check the installed package on the Central Server:
rpm -q centreon-web
On Debian based systems, use dpkg -l centreon-web. Compare the result with the three fixed versions. Also check whether the Open Tickets module is in use and who can reach the web interface.
What to do now
- Update Centreon Web to the fixed version for your release line.
- Follow the Centreon HA update procedure if you run a high availability platform.
- Restrict access to the Central Server web interface to management networks.
- Review the server for unexpected commands and accounts if it was exposed.
- Subscribe to the Centreon security bulletins section so new issues reach you quickly.
Why it matters
The record lists CWE-20, improper input validation. The bulletin says the flaw leads to remote code execution on CLAPI, the command line API of Centreon. Input was accepted without checks that would have kept it from reaching a command context.
A monitoring server holds credentials and network maps for the estate it watches. A compromise there is a stepping stone to everything it monitors. The record does not mark this CVE as known exploited.
Quick check
Which versions fix it?
Centreon Web 25.10.8, 24.10.20 and 24.04.24, per the Centreon bulletin.
Sources
- CVE-2026-2750 on Gold
- Centreon security bulletin, fetched: https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2750-centreon-web-critical-severity-5503
Last reviewed: 19 October 2026.
