Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105785. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit demonstrates a command injection vulnerability in Centreon 2.6.1 via the 'persistant' POST parameter, allowing arbitrary shell command execution. It also includes examples of stored XSS and unrestricted file upload vulnerabilities in the same software.
Description
Centreon 2.6.1 - Multiple Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
by LiquidWorm · textwebappsphp
https://www.exploit-db.com/exploits/38339
The exploit demonstrates a command injection vulnerability in Centreon 2.6.1 via the 'persistant' POST parameter, allowing arbitrary shell command execution. It also includes examples of stored XSS and unrestricted file upload vulnerabilities in the same software.
Classification
Working Poc 95%
Attack Type
Rce | Xss | Other
Complexity
Trivial
Reliability
Reliable
Target:
Centreon 2.6.1 (CES 3.2)
Auth required
Prerequisites:
Valid session cookie (PHPSESSID) · Network access to the target application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026