CVE-2019-17107: Centreon Web

High severity, CVSS 8.8. EPSS: 3.6% chance of exploitation in the next 30 days.

minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the command_hostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect.

Affected products

• Centreon Centreon Web: from 2.8, before 2.8.27 (fixed in 2.8.27); from 18.10.0, before 18.10.4 (fixed in 18.10.4)

Published 2019-10-08. Last modified 2026-06-17.