What is the CVSS score of CVE-2026-2750?

CVE-2026-2750 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Web are affected by CVE-2026-2750?

A critical input validation vulnerability in Centreon Open Tickets (CVSS 9.1) affects all versions before 25.10, 24.10, and 24.04, potentially allowing attackers to compromise the Central Server.

How to fix or mitigate CVE-2026-2750?

Within 24 hours: Inventory all Centreon deployments and identify systems running affected versions (before 25.10, 24.10, 24.04); disable or restrict network access to the Open Tickets module if operationally feasible. Within 7 days: Implement WAF rules to block malicious input to the Open Tickets module; apply network segmentation to limit lateral movement from compromised systems; increase monitoring and logging of Open Tickets module activity. Within 30 days: Upgrade to patched versions (25.10 or later) as soon as vendor releases; conduct forensic review for signs of exploitation; validate all system changes and access logs.

Web CVE-2026-2750

CRITICAL

Improper Input Validation (CWE-20)

2026-02-27 bd4443e6-1eef-43f3-9886-25fc9ceeaae7

Information Disclosure Web Centreon

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 27, 2026 - 16:16 nvd

CRITICAL 9.1

DescriptionCVE.org

Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04.

AnalysisAI

Input validation vulnerability in Centreon Open Tickets module allows authenticated attackers to manipulate ticket data, potentially affecting monitored infrastructure integrity.