CVE-2026-14453

{
  "id": "CVE-2026-14453",
  "sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
  "published": "2026-07-13T09:16:23.893",
  "lastModified": "2026-10-24T22:10:00.210",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message_confirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to inject and execute arbitrary code on the server. This results in disclosure of environment secrets and could impact platform availability of Centreon Infra Monitoring product."
    },
    {
      "lang": "es",
      "value": "Esta vulnerabilidad es una Inyección de Plantillas del Lado del Servidor (SSTI) crítica en el módulo centreon-open-tickets de Centreon que conduce a la ejecución remota de código. El campo message_confirm se almacena sin sanitización y se renderiza a través de Smarty sin ninguna política de seguridad habilitada, permitiendo a cualquier usuario autenticado inyectar y ejecutar código arbitrario en el servidor. Esto resulta en la divulgación de secretos de entorno y podría impactar la disponibilidad de la plataforma del producto Centreon Infra Monitoring."
    }
  ],
  "affected": [
    {
      "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
      "affectedData": [
        {
          "vendor": "Centreon",
          "product": "Infra Monitoring",
          "defaultStatus": "affected",
          "packageName": "centreon-open-tickets",
          "versions": [
            {
              "version": "24.10.0",
              "lessThan": "24.10.14",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "25.10.0",
              "lessThan": "25.10.9",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
          "baseScore": 9.6,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 5.8
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-13T13:53:12.577843Z",
          "id": "CVE-2026-14453",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/centreon/centreon/releases",
      "source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7"
    }
  ]
}