CVE-2025-15029 CRITICAL

CVE-2025-15029: An unauthenticated user is able to introduce SQL Injection using the Awie export module

Vendor Centreon
Product Infra Monitoring
Weakness CWE-89 · SQLi
Published January 5, 2026
Last update January 8, 2026
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.

Key dates

02Disclosure timeline

January 5, 2026 CVE published
January 8, 2026 Record updated