CVE-2018-21023: Centreon Web

High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days.

getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter.

Affected products

• Centreon Centreon Web: from 2.8, before 2.8.28 (fixed in 2.8.28); from 18.10.0, before 18.10.5 (fixed in 18.10.5)

Published 2019-10-08. Last modified 2026-06-17.