---
id: 9176
title: "[CVE-2026-2749] [EN] Deep Looking into Centreon"
cve: CVE-2026-2749
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/en-deep-looking-into-centreon/"
published_at: "2026-03-06T20:49:18Z"
tags: ["rce", "vulnerability-research", "sql-injection", "path-traversal", "research", "file-upload"]
phying_url: "https://phying.com/item/9176"
lang: en
---

# [CVE-2026-2749] [EN] Deep Looking into Centreon

## Summary

Summary In this research, three critical vulnerabilities were identified in Centreon Web and the Centreon Open Tickets module, allowing everything from full database extraction via SQL Injection to remote command execution on the server through a Path Traversal vulnerability in the file upload functionality and a Command Injection vulnerability. Exploitation requires only an authenticated session, […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2026-2749
- **Published:** 2026-03-06T20:49:18Z
- **Original:** https://yokai.hakaisecurity.io/en-deep-looking-into-centreon/
- **Phying News:** https://phying.com/item/9176