Critical · published January 5, 2026
🚨 A sneaky SQL injection vulnerability in Centreon Infra Monitoring could let any unauthenticated user waltz right into your database—yes, it's that simple! 🔥 Think of it like an open invitation to a party where anyone can enter without so much as a secret password—once they're in, they can rummage through your belongings and make themselves at home! An attacker could exploit this vulnerability to execute malicious SQL commands, potentially allowing them to access sensitive data, manipulate records, or even take complete control of your database server. This is absolutely devastating for any organization relying on these systems, as it opens the door to data breaches and unauthorized access.
Think of it like an open invitation to a party where anyone can enter without so much as a secret password—once they're in, they can rummage through your belongings and make themselves at home! This SQL injection vulnerability arises from improper neutralization of special elements in SQL commands within the Awie export modules, allowing attackers to inject malicious SQL code without authentication.
An attacker could exploit this vulnerability to execute malicious SQL commands, potentially allowing them to access sensitive data, manipulate records, or even take complete control of your database server. This is absolutely devastating for any organization relying on these systems, as it opens the door to data breaches and unauthorized access. Immediately update your Centreon Infra Monitoring to versions 25.10.2, 24.10.3, or 24.04.3, depending on your current version. Additionally, review and sanitize all user inputs to prevent SQL injection in the future. It's critical to implement robust input validation and prepared statements! You've got this! Follow these steps, and you'll have your systems locked down in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| centreon/awie | ≥ 24.04.0, < 24.04.3 | 24.04.3 |
| centreon/awie | ≥ 24.10.0, < 24.10.3 | 24.10.3 |
| centreon/awie | ≥ 25.10.0, < 25.10.2 | 25.10.2 |