CVE-2026-2750 CRITICAL

CVE-2026-2750: Command Injection via CLAPI generatetraps

Vendor Centreon
Product Centreon Open Tickets on Central Server
Weakness CWE-20 · Input validation
Published February 27, 2026
Last update March 6, 2026
View on NVD All CVEs

CVSS base score

9.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04.

Key dates

02Disclosure timeline

February 27, 2026 CVE published
March 6, 2026 Record updated