Ce mail provient de l'extérieur, restons vigilants

=====================================================================

                            CERT-Renater

                Note d'Information No. 2026/VULN225
_____________________________________________________________________

DATE                : 26/02/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Centreon Open Tickets versions
                         prior to 25.10.3, 24.10.8, 24.04.7.

=====================================================================
https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2749-centreon-open-tickets-critical-severity-5493
_____________________________________________________________________

CVE-2026-2749 - Centreon Open Tickets - CRITICAL Severity

    lpinsivy
    Centreonian

Publication date: February 24th, 2026

Components: centreon-open-tickets

Description: A path traversal vulnerability in the Open Tickets file
upload allows an authenticated user to write or delete arbitrary
files.

Reference: CVE-2026-2749

CVSS: 9.9

Severity: Critical

 

Status: Fixes have been provided for all supported versions and it is
recommended to update Centreon Open Tickets on Central Server:

    Centreon Open Tickets 25.10.3
    Centreon Open Tickets 24.10.8
    Centreon Open Tickets 24.04.7

These versions include cumulative fixes from prior updates.

:index_vers_la_droite: To ensure you do not lose any customization that
might have been done to your OpenTicket provider, please make sure to
create a backup of your configuration before performing update!

 
If you are using an High Availability Platform, please ensure to follow
the Centreon HA Update procedures.

 
Reporter: N/A

 
Stay ahead of potential threats by subscribing to the Security Bulletin
section. You’ll receive instant notifications whenever a new bulletin
is published, ensuring your infrastructure remains secure and up to
date.


=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================




