CVE-2011-4431: Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated...

Security readout for executives and security teams

This is an old Centreon monitoring-server flaw. A logged-in user could abuse a directory traversal weakness in main.php to run arbitrary commands. There is no KEV listing and no supplied source showing active exploitation, but command execution on a monitoring platform can affect highly privileged operational systems. Exposure is most likely where Centreon versions earlier than 2.3.2 remain deployed and reachable by authenticated users. Internet exposure increases concern, but the supplied sources do not state whether anonymous access is possible. Prioritize remediation if legacy Centreon is still in use. Monitoring systems often have broad operational visibility and trusted integrations, so authenticated command execution can create material risk even without confirmed active exploitation. Mitigation focus: Identify any Centreon instances and confirm their exact version.; Upgrade Centreon to 2.3.2 or later where applicable.; Restrict Centreon access to trusted networks and administrative users..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.