CVE-2021-26804: Centreon Web

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.

Affected products

• Centreon Centreon Web: version 19.10.18 only; version 20.04.8 only; version 20.10.2 only

Published 2021-05-04. Last modified 2026-06-17.