Logo
Retour à la veille

CVE-2026-11587

Publié : 29 octobre 2026
Modifié : 29 octobre 2026
Lien officiel NVD
Score CVSS
7.2
HIGH

Description détaillée

SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://github.com/centreon/centreon/releaseshttps://thewatch.centreon.comundefined

Dernières Vulnérabilités

CVE-2026-60111

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

VOIR DÉTAILS

CVE-2026-51912

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

VOIR DÉTAILS

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the victim agent_id and agent_execution_id to /agent_executions_configs/details/agent_id/{agent_id}/agent_execution_id/{agent_execution_id}. The endpoint lacks an organization ownership check on the selected agent and execution.

VOIR DÉTAILS