{"api_version":"1","generated_at":"2026-10-01T10:27:31+00:00","cve":"CVE-2025-5965","urls":{"html":"https://cve.report/CVE-2025-5965","api":"https://cve.report/api/cve/CVE-2025-5965.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-5965","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-5965"},"summary":{"title":"RCE via the backup feature available only to user with high privilege","description":"In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.","state":"PUBLISHED","assigner":"Centreon","published_at":"2026-01-05 10:15:55","updated_at":"2026-09-30 23:10:00"},"problem_types":["CWE-78","CWE-78 CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"],"metrics":[{"version":"3.1","source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","type":"Secondary","score":"7.2","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.2","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5965-centreon-web-high-severity-5362","name":"https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5965-centreon-web-high-severity-5362","refsource":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","tags":["Patch","Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/centreon/centreon/releases","name":"https://github.com/centreon/centreon/releases","refsource":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","tags":["Release Notes"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5965","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5965","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Centreon","product":"Infra Monitoring","version":"affected 25.10.0 25.10.2 semver","platforms":[]},{"source":"CNA","vendor":"Centreon","product":"Infra Monitoring","version":"affected 24.10.0 24.10.15 semver","platforms":[]},{"source":"CNA","vendor":"Centreon","product":"Infra Monitoring","version":"affected 24.04.0 24.04.19 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"h00die-gr3y","lang":"en"}],"nvd_cpes":[{"cve_year":"2025","cve_id":"5965","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"centreon","cpe5":"centreon_web","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-5965","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-01-05T20:01:00.415596Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-01-05T20:01:20.692Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","modules":["Backup configuration in the administration setup"],"product":"Infra Monitoring","vendor":"Centreon","versions":[{"lessThan":"25.10.2","status":"affected","version":"25.10.0","versionType":"semver"},{"lessThan":"24.10.15","status":"affected","version":"24.10.0","versionType":"semver"},{"lessThan":"24.04.19","status":"affected","version":"24.04.0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"h00die-gr3y"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.<p>This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.</p>"}],"value":"In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19."}],"impacts":[{"capecId":"CAPEC-88","descriptions":[{"lang":"en","value":"CAPEC-88 OS Command Injection"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-01-08T15:43:03.373Z","orgId":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","shortName":"Centreon"},"references":[{"tags":["release-notes"],"url":"https://github.com/centreon/centreon/releases"},{"tags":["vendor-advisory"],"url":"https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-5965-centreon-web-high-severity-5362"}],"source":{"discovery":"UNKNOWN"},"title":"RCE via the backup feature available only to user with high privilege","x_generator":{"engine":"Vulnogram 0.2.0"}}},"cveMetadata":{"assignerOrgId":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","assignerShortName":"Centreon","cveId":"CVE-2025-5965","datePublished":"2026-01-05T10:06:05.494Z","dateReserved":"2025-06-10T08:14:47.529Z","dateUpdated":"2026-01-08T15:43:03.373Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-01-05 10:15:55","lastModifiedDate":"2026-09-30 23:10:00","problem_types":["CWE-78","CWE-78 CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"],"metrics":{"cvssMetricV31":[{"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-05T20:01:00.415596Z","id":"CVE-2025-5965","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","versionStartIncluding":"24.04.0","versionEndExcluding":"24.04.19","matchCriteriaId":"440A575D-6C68-4894-A4DB-C62065FE0349"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","versionStartIncluding":"24.10.0","versionEndExcluding":"24.10.15","matchCriteriaId":"BE9F2C39-E778-4EFE-8E0B-14D5174A717D"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","versionStartIncluding":"25.10.0","versionEndExcluding":"25.10.2","matchCriteriaId":"1842C772-1AC5-49B3-A209-2B8AD6C31134"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"5965","Ordinal":"1","Title":"RCE via the backup feature available only to user with high priv","CVE":"CVE-2025-5965","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"5965","Ordinal":"1","NoteData":"In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Backup configuration in the administration setup modules) allows OS Command Injection.This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.15, from 24.04.0 before 24.04.19.","Type":"Description","Title":"RCE via the backup feature available only to user with high priv"}]}}}