CVE-2020-9463: Centreon

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remote request.

Affected products

• Centreon Centreon: version 19.10 only

Published 2020-02-28. Last modified 2026-06-17.